Security / trust page — Firezone

Cited by

Facts read from this source

• SOC 2 type2 Report an error

  “SOC 2 Type 2 Compliant”

• SOC 2 type1 report Report an error

  “SOC 2 Type 1 Report- Firezone Request access”

• SOC 2 type2 report Report an error

  “2024-11 Firezone SOC 2 Type 2 Report Request access”

• Pentest report Report an error

  “Q2 2026 Firezone Pentest Request access”

• Status page Report an error

  “firezone.statuspage.io”

• Access control Report an error

  “Access granting process used Access management policy established Account inventory maintained Dormant accounts disabled Employee access regularly reviewed MFA required for critical services Password management policy enforced Password management policy established”

• Data protection Report an error

  “Data encrypted at rest Data encrypted in-transit Data inventory maintained Data management and retention policy established”

• Disaster recovery Report an error

  “Automated backups enabled Business continuity and disaster recovery policy established Data recovery process established Disaster recovery plans tested Recovery data isolated”

• Endpoint security Report an error

  “Anti-malware deployed on end-user devices Data encrypted on end-user devices Firewall maintained on end-user devices Mobile device management (MDM) used”

• Infrastructure security Report an error

  “Active discovery tools used Buckets not exposed publicly Configuration management system established Infrastructure changes logged Infrastructure changes require review Infrastructure deployed using an infrastructure-as-code tool Production deployment access restricted Unauthorized assets addressed and removed Unique production database authentication enforced VPN used”

• Monitoring incident response Report an error

  “Adequate audit log storage maintained Audit log management process maintained Audit logs collected Incident response policy established Incident review process implemented Infrastructure performance monitored Log management used Network infrastructure monitored”

• Organizational security Report an error

  “Acceptable use policy established Asset inventory maintained Asset management policy established Code of conduct acknowledged by contractors Code of conduct acknowledged by employees Code of conduct established Company security commitments externally communicated Confidentiality Agreement acknowledged by contractors Confidentiality Agreement acknowledged by employees Data-flow diagrams maintained External support resources available (i.e., documentation) Offboarding process established Onboarding process established Performance evaluations conducted Physical access restricted Policies signed by relevant personnel Reference checks performed for employees Roles and responsibilities specified Security awareness training conducted Service description communicated Software development lifecycle established System changes externally communicated System changes internally communicated Third-party security oversight conducted”

• Risk management Report an error

  “Risk assessments performed Risk management policy established Vendor inventory maintained Vendor management program established”

• Vulnerability management Report an error

  “Automated software patch management performed Penetration testing findings remediated Penetration testing performed within the last 12 months Vulnerabilities scanned Vulnerability management policy established”

Scores citing this record

• The DevOps Engineer Architecture, reliability & security assurance
• The DevOps Engineer European sovereignty
• The IT Lead Architecture, reliability & security assurance
• The IT Lead European sovereignty
• The MSP Technician Architecture, reliability & security assurance
• The Operations Manager Architecture, reliability & security assurance
• The Operations Manager European sovereignty
• The Information Security Officer Architecture, reliability & security assurance
• The Skeptic Architecture, reliability & security assurance