Yes. Xoxoday will provide the latest Vulnerability Assessment and Penetration Testing (VAPT) report for the proposed application version. The VAPT summary and certificate are available under NDA. Testing is conducted by an independent third-party security firm (Appknox) using both automated and manual testing methodologies.
What audit and compliance certificates does Xoxoday provide?
Xoxoday provides ISO 27001:2023 and SOC 2 Type II audit certificates, plus a 2024 VAPT certificate, as evidence for compliance reviews.
Does Xoxoday Conduct Regular Penetration Testing?
Xoxoday conducts annual third-party VAPT, shares NDA-bound reports on request, and patches critical vulnerabilities within weekly release cycles.