Pendo: Trust page changed

Trust / securityChanged (not classified) (rule)Changed 2026-11-12 09:01 UTCtrust.pendo.io

Summary

Pendo’s trust page now describes Cobalt.io’s August–September 2026 application penetration test, replacing the September 2025 report description. The stated scope now names the Pendo web application and APIs (including Novus and Predict), mobile SDKs, and Pendo Launcher browser extension; customers and prospects may request the report under NDA.

Machine-written from the diff below (Sol; type: other). Check the diff before relying on it.

What changed

~~Struck in red~~ is what Pendo removed; blue is what they added. Muted text is unchanged context.

Added#1

…This document is the full report from the nothing here vendor, Cobalt.io, that performed Pendo's annual application penetration…

…This document is the full report from the third-party vendor, Cobalt.io, that performed Pendo's annual application penetration…

Added#2

…the third-party vendor, Cobalt.io, that performed Pendo's annual nothing here under NDA. Generate AI-powered account health summaries combining…

…the third-party vendor, Cobalt.io, that performed Pendo's annual application penetration test between August and September 2026. It covers the Pendo web application and APIs (including Novus and Predict), the mobile SDKs and the Pendo Launcher browser extension. Customers and prospects may request it under NDA. Generate AI-powered account health summaries combining…

Removed#3

…Cobalt.io, that performed Pendo's annual penetration test in ~~September 2025. It covers all of our services, including Engage, Adopt, Feedback, the Pendo Agent, and mobile SDKs. Customers and Prospects may request it if~~ under NDA. Generate AI-powered account health summaries combining…

…Cobalt.io, that performed Pendo's annual penetration test in removed under NDA. Generate AI-powered account health summaries combining…

Compared with the previous archived version (#17077 to #20386). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).

Archive proof

Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves this record existed by then and has not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Nov 7
Before captured 08:59 UTC
In the 2026-11-07 checkpoint, timestamped by FreeTSA and DigiCert on Nov 8, 00:41 UTC. Record hash 03986f111356a115…
Download proof

Rewindex captured a newer version after the last checkpoint; the next run (00:41 UTC) commits it.

History of this page

TodayThursday, November 12Thu, Nov 12

1 page change

Content changed
09:01Page change
Trust pagechangedthis change
Pendo’s trust page now describes Cobalt.io’s August–September 2026 application penetration test, replacing the September 2025 report description. The stated scope now names the Pendo web application and APIs (including Novus and Predict), mobile SDKs, and Pendo Launcher browser extension; customers and prospects may request the report under NDA.

Saturday, November 7

1 page change

Content changed
08:59Page change
Trust pagechanged
Pendo’s Trust page updated its Penetration Test Attestation Letter from September 2025 to September 2026 and the referenced annual penetration test from August 2025 to August 2026. Customers reviewing security documentation now see newer testing dates; access still does not require an NDA.

Friday, October 23

1 page change

Content changed
08:58Page change
Trust pagechanged
Pendo added a security update about critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, stating that its Security team began assessing exposure upon disclosure. Pendo says its platform is not built on PHP, but the archived excerpt cuts off before its conclusion about products and customer data.

Wednesday, October 21

1 page change

Content changed
08:59Page change
Trust pagechanged
Pendo’s Trust page changed the date beside AI Model Cards from September 2025 to October 2026 and specified that Cobalt.io performed its annual penetration test in September 2025. These are date and wording updates; the diff shows no change to service coverage or security commitments.

Cite this

Trust page changed on Pendo’s Trust page, changed 2026-11-12 09:01 UTC (change 4 of 4).

Title: Trust page changed
Vendor: Pendo
Date: 2026-11-12 09:01 UTC
URL: https://rewindex.com/change/p20386

All Pendo changes Pendo profile Markdown JSON