How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 418 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
Remote
HR and HRIS
The intelligent infrastructure for global
Sentry
DevOps and observability
Application performance monitoring for developers & software teams to see errors clearer, solve issues faster & continue learning
Data Zoo
Identity and access
Data Zoo is a leading identity solutions provider and one of the fastest-growing tech companies in Australia (Deloitte Fast 50
InEight
Project management
InEight is a leading developer of construction project management software, combining proven technology with a unified vision, delivering
FT
Fusion Telecom
Payments
Telecommunications and Payments
SAI
AI tools
Sai Technologies is a platform for universities to adapt and integrate generative artificial intelligence into their
Deel
HR and HRIS
The all-in-one HR and payroll platform for global teams
Dialpad
Communications and CPaaS
The only AI-driven, cloud-native business communications
ConnectWise
Security
Empower your MSP with all-in-one tools: RMM, UMM, SOC, NOC, and
Quickbase
No-code and automation
Quickbase is a cloud-based platform that allows businesses to create custom applications and workflows to streamline their processes and
Alert Logic
Security
Alert Logic is the only managed detection and response (MDR) provider that delivers comprehensive coverage for public clouds, SaaS
Red Canary
Security
Red Canary, a leader in managed detection and response (MDR), provides comprehensive protection across cloud workloads, identities, SaaS
SEMrush
Research and data providers
Semrush Holdings, Inc. is an American software company and wholly owned subsidiary of Adobe Inc
BrowserStack
Developer tools
BrowserStack’s mission is to empower developers to build amazing
Lacework
Security
Lacework is the data-driven cloud security company delivering end-to-end visibility and automated insight into risk across multicloud
Achievers
HR and HRIS
Achievers is the leading provider of cloud-based Employee Rewards and Recognition software and
AudioEye
Compliance and GRC
AudioEye, Inc. (AudioEye) is an industry-leading platform delivering website accessibility compliance at all price points to businesses of all sizes. Audi...
Automation Anywhere
No-code and automation
Automation Anywhere is a developer of robotic process automation (RPA) software, which employs software bots to complete business
Axcient
Cloud storage
Our mission is to cure data loss, providing Managed Service Providers (MSPs) with tailor-made Business Continuity and Disaster Recovery
Bitglass
Security
Bitglass, the Next-Gen CASB company, is based in Silicon Valley with offices
Bugsnag
DevOps and observability
Bugsnag is the leading crash and error monitoring platform for software teams to improve their code quality and customer
Clari
Analytics
Clari is a predictive sales analytics platform that services the needs of enterprise business-to-business sales
CyberFOX
Identity and access
CyberFOX provides MSPs and IT Pros with identity access management (IAM) solutions in password management and privileged access
Daon
Identity and access
Daon, The Digital Identity Trust company, empowers organizations worldwide to establish customer trust through intelligent identity
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.