VULNERABILITY MANAGEMENT

Vulnerability scanning is enabled (GitHub)

This test verifies that vulnerability scanning (via Dependabot) is enabled for your GitHub repositories, allowing you to identify and manage software vulnerabilities effectively.

Ready for Audit

Related Controls (2)

Vulnerability scanning conducted

Passing

infrastructure

Automated vulnerability scans performed weekly with remediation tracking.

Infrastructure Team•weekly

Confidentiality agreements signed

Passing

organizational

All employees and contractors sign NDAs upon hire.

Security Team•continuous

View in Vanta Dashboard

Access real-time status updates and additional details in Vanta's compliance monitoring platform.

Open in Vanta

Related Policies

Human Resources Security Policy

v2.2.0

Vulnerability Management Policy

v1.5.0

Related Frameworks

SOC 2 Type II

certified

Evidence Information

Evidence ID: evidence-237
Category: VULNERABILITY MANAGEMENT
Type: TEST
Last Updated: October 7, 2025