Casco
Casco provides autonomous security testing and penetration testing services for web apps, APIs, and AI systems.
Compliance
Compliance frameworks Casco currently meets or is working toward to uphold their security and privacy commitments.
Resource library
Our security, compliance, and policy documentation, including audit reports.
Controls
Our security program is built on a complete set of controls that govern how we safeguard data and manage risk.
- Vulnerability Management
- Vendor Inventory
- Background Checks
- Trust Page
- Threat Intelligence Management
- Endpoint Encryption
- Mobile Device Management
- Role-based Access
- Multi-factor Authentication
- Incident Response Plan
- Code of Conduct
Subprocessors
Trusted third parties that support our services and may process customer data as part of their function.
Updates
A live record of significant changes, vulnerability disclosures, and other notifications.
FedRAMP resources
Authorization data, documentation, and access records required for FedRAMP authorization and continuous monitoring, available to authorized federal parties.
FedRAMP 20x Certification Package Overview (FRC-CSO-PKG)
September 2, 2026
FedRAMP 20x Security Decision Record (SDR-CSO-FRR)
September 2, 2026
FedRAMP 20x Ongoing Certification Report (CCM-OCR-AVL)
September 2, 2026
FedRAMP 20x Certification Package Overview (Human Readable)
September 2, 2026
FedRAMP 20x Security Decision Record (Human Readable)
September 2, 2026
FedRAMP 20x Ongoing Certification Report (Human Readable)
September 2, 2026
FedRAMP 20x Initial Incident Report (IEC-CSO-IIR)
September 2, 2026
FedRAMP 20x Ongoing Incident Report (IEC-CSO-OIR)
September 2, 2026
FedRAMP 20x Final Incident Report (IEC-CSO-FIR)
September 2, 2026
FedRAMP 20x Initial Incident Report (Human Readable)
September 2, 2026
FedRAMP 20x Ongoing Incident Report (Human Readable)
September 2, 2026
FedRAMP 20x Final Incident Report (Human Readable)
September 2, 2026
SOC 2 Type 2 Report
July 16, 2026
