On the ground in California
Built for how California actually works
California companies get asked for penetration testing by enterprise customers, auditors, investors, partners, and insurers, and the volume of those requests is higher here than anywhere else because so many companies sell software to other companies. A SOC 2 report with a recent independent test behind it is the price of entry to enterprise deals, and the security questionnaires that follow ask for the date, scope, and provider of the last test.
State law raises the stakes. The California Consumer Privacy Act, as amended by the California Privacy Rights Act, requires businesses to implement reasonable security procedures for personal information and gives consumers a private right of action when a breach results from the failure to do so. California’s connected-device law requires manufacturers of devices sold in the state to equip them with reasonable security features. A manual penetration test is the clearest evidence that the procedures and the features are real.
We serve companies across the state, including San Francisco, Oakland, Palo Alto, San Jose, Los Angeles, Santa Monica, Burbank, Irvine and Orange County, and San Diego, from the same team. Testing is delivered remotely from our New York office, with on-site work arranged when a scope needs a person in the building.
