@leerayl@infosec.exchange To my understanding Vanta has their own 'recommended auditors' who'll take whatever you tell them at face value, no matter how fraudulent their evidence is. So it's honestly taken away all my trust in SOC2 as a sign of security. Genuinely disturbing.