# Vanta: Trust page changed

**Summary:** Vanta added “Penetration Test Status of Findings (Oct 2026)” and a PHP vulnerability response stating its application does not use PHP and production infrastructure is unaffected. Displayed controls replace “Production inventory maintained” with “Password policy enforced”; the SOC 2 report announcement was removed. These update customer-facing security disclosures without establishing changes to underlying controls. _(machine-written, sol)_
- Kind: Trust / security · Label: Changed (not classified) (rule)
- Changed: 2026-10-22 08:58 UTC · Detected: 2026-10-22 08:58 UTC
- [Source: https://trust.vanta.com](https://trust.vanta.com)
- [Company: Vanta](https://rewindex.com/company/vanta.md)
- Versions: before page\_version:4562 → after page\_version:5410
- Change 4 of 6 for this page

## What changed

**1. Added**

```diff
  …(Feb 2026) Penetration Test Executive Summary Report 2026
+ Penetration Test Status of Findings (Oct 2026)
  Questionnaires Vanta's AI Security Assessment 2026 Vanta CAIQv4.1.0…
```

**2. Changed**

```diff
  …Security controls Organizational Security Employee background checks performed
- Security awareness training implemented Production inventory maintained
+ Password policy enforced Security awareness training implemented
  View ‹count› more Organizational Security controls Internal Security…
```

**3. Added**

```diff
  …need to connect key systems? Updates View all
+ Security Vanta Response to PHP Vulnerabilities Published ‹date› Vanta does not use PHP within the Vanta application, and our production infrastructure is not affected by these vulnerabilities. We are monitoring our vendors for any impacts and will take measures as appropriate to secure Vanta and our customers.
  Read more Read more about Vanta Response to…
```

**4. Added**

```diff
  …our customers. Read more Read more about Vanta
+ Response to PHP Vulnerabilities
  General Vanta Web App Accessibility Published ‹date› At…
```

**5. Removed**

```diff
  …Uploaded - Vanta CMMC Shared Responsibility Matrix (CRM)
- Compliance Vanta's Latest SOC 2 Type II Report is Available Published ‹date› We are excited to announce that Vanta has successfully completed another System and Organization Controls (SOC) 2 Type II audit without any noted exceptions. A SOC 2 Type II report describes a service organization's systems, whether the design of specified controls meets the relevant trust services categories, and assesses the effectiveness of those controls over a specified period of time. You can now view and download our SOC 2 report in Vanta's Trust Center Resources.
  Please let us know if you have any…
```

**6. Removed**

```diff
  …any questions. Read more Read more about Vanta's
- Latest SOC 2 Type II Report is Available
  Opens in new tab Ask Vanta a question…
```

**7. Added**

```diff
  …latest penetration test with Doysensec in September 2026.
+ Table and summary of the August 2026
  Penetration test findings and status of remediation. A…
```

## History of this page

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2026-10-19 08:59 UTC | [Trust page changed](https://rewindex.com/change/p2738.md) | Changed (not classified) |
| 2026-10-20 09:03 UTC | [Trust page changed](https://rewindex.com/change/p2934.md) | Changed (not classified) |
| 2026-10-21 08:57 UTC | [Trust page changed](https://rewindex.com/change/p4562.md) | Changed (not classified) |
| 2026-10-22 08:58 UTC | Trust page changed (this change) | Changed (not classified) |
| 2026-10-23 09:01 UTC | [Trust page changed](https://rewindex.com/change/p6246.md) | Changed (not classified) |
| 2026-10-24 09:02 UTC | [Trust page changed](https://rewindex.com/change/p7034.md) | Changed (not classified) |

Previous: [change](https://rewindex.com/change/p4562.md) · Next: [change](https://rewindex.com/change/p6246.md) · All Vanta changes: [timeline](https://rewindex.com/company/vanta/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._


---
Canonical: https://rewindex.com/change/p5410 · Markdown: https://rewindex.com/change/p5410.md · JSON: https://rewindex.com/api/v1/changes/p5410 · Generated 2026-10-24T14:01:29.411Z