Saltar a contenido
Full Width CTA - BG

Security testing

Penetration testing engagements

While we aim to identify and prevent security bugs in our software development pipeline, no system is perfect. That’s why we also run regular security assessments on our products. These assessments are typically performed in a white box scenario with access to architecture details and source code. Our approach results in more efficient and effective testing when compared to a black box scenario where little information about the product is provided.

For our recent assessments, we have started collecting and publishing letters of attestation. For the older assessments, we are happy to share details upon request. We aim to collect letters for subsequent/future tests as they are completed.

 

Assessment letters of attestation

SolutionProductDate of Last TestVendorLetter of Attestation
EndpointIntercept XOctober 2024MWR CyberSecLoA - MWR - Endpoint
 XDRFebruary 2024MDSecLoA - MDSec - MDR - XDR - SOC.OS
 Sophos Mobile ControlAugust 2024MWR CyberSecLoA-MWR-SMC
NetworkFirewallNovember 2024MWR CyberSecLoA – MWR – Firewall
LoA – MWR – Sophos Connect Client
 SG UTMJuly 2022NettitudeLoA - Nettitude - SG UTM
 SD-RED Remote Ethernet DevicesNovember 2021MDSecContact Us
 ZTNAOctober 2023MWR CyberSecLoA - MWR - Firewall/ZTNA
 SwitchJanuary 2024Sophos Red TeamContact Us
 DNS ProtectionJanuary 2024MWR CyberSecLoA - MWR - DNS Protection
Security OperationsMDRFebruary 2025MDSecLoA - MDSec - MDR
 XDRFebruary 2024MDSecLoA - MDSec - MDR - XDR - SOC.OS
 RefactrFebruary 2022Sophos Red TeamContact Us
 SOC.OSFebruary 2024MDSecLoA - MDSec - MDR - XDR - SOC.OSLoA - MDSec - MDR - XDR - SOC.OS
 FactoryFebruary 2024MDSecLoA - MDSec - Sophos Factory
MessagingCentral EmailAugust 2024Sophos Red TeamContact Us
CloudSophos CentralJanuary 2025MDSecLoA - MDSec - Central
 Cloud OptixJanuary 2024MDSecLoA - MDSec - Optix
 ZTNAFebruary 2025Pen Test PartnersLoA – PTP - ZTNA
 FirewallOctober 2023MWR CyberSecLoA - MWR - Firewall/ZTNA
Home SecuritySophos HomeAugust 2022Sophos Red TeamContact Us
TaegisTaegis VDRJuly 2025MWR  CyberSecLoA – MWR – Taegis VDR
OtherSophosLabs
(including Intelix)
November 2024Sophos Red TeamContact Us