Picus Security Trust Center

generated: '2026-08-02'
method: searched
probe: true
source: https://www.picussecurity.com/trust-center
url: https://www.picussecurity.com/trust-center
description: >-
  The Picus Trust Center publishes the company's privacy and security posture, its Vulnerability Disclosure
  Program, downloadable third-party audit certificates and attestations, and a security FAQ. Certificates are
  offered as downloads from the Compliance section of the page; the CSA STAR listing is hosted on the Cloud
  Security Alliance registry.
certifications:
- ISO/IEC 27001
- ISO/IEC 27701
- ISO/IEC 22301
- ISO/IEC 20000-1
- SOC 2 Type 2
- CSA STAR Level One
sections:
- name: Privacy & Security
  url: https://www.picussecurity.com/trust-center/privacy-security
- name: Vulnerability Disclosure Program
  url: https://www.picussecurity.com/trust-center
- name: Compliance
  url: https://www.picussecurity.com/trust-center
- name: Security FAQ
  url: https://www.picussecurity.com/trust-center
- name: KVKK (Turkish personal data protection law)
  url: https://www.picussecurity.com/trust-center/kisisel-verilerin-korunmasi-kanunu
- name: Information security & corporate policies
  url: https://www.picussecurity.com/security
external_registries:
- name: Cloud Security Alliance STAR Registry
  url: https://cloudsecurityalliance.org/star/registry/picus-security
evidence:
- source: https://www.picussecurity.com/trust-center
  http_status: 200
  fetched: '2026-08-02'
  keywords:
  - iso 27001
  - iso 27701
  - iso 22301
  - iso 20000
  - soc 2 type 2
  - csa star
  - trust center
  - vulnerability disclosure program
- source: https://www.picussecurity.com/security
  http_status: 200
  fetched: '2026-08-02'
  keywords:
  - iso/iec 27001:2013
  - information security policy
notes: >-
  No PCI DSS, FedRAMP or HIPAA certification is claimed by Picus. Picus publishes a HIPAA *use-case* page
  (/hipaa-compliance) describing how the platform helps customers validate HIPAA controls — that is a product
  page, not a Picus attestation, and is deliberately excluded from certifications above.