How-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read
registry
CSA STAR evidence across 418 vendors
The CSA STAR registry is a public, scheme-operated list. Level 1 is a self-assessment against the Consensus Assessments Initiative Questionnaire; Level 2 is a third-party certification (ISO 27001 basis) or attestation (SOC 2 basis) against the Cloud Controls Matrix. CertReports mirrors every entry and links it to the vendor page.
- Verified rows
- 418
- Vendor-stated
- 16
- Expired
- 0
- Last verified
- 2 Nov 2026
LogicMonitor
DevOps and observability
LogicMonitor® offers hybrid observability powered by
Omnissa
IT management
Omnissa is the digital work platform leader, trusted by thousands of organizations worldwide as the former VMware End-User Computing
Outreach
Sales tools
Outreach provides a Software as a Service (SaaS) sales acceleration
Virtru
Security
Virtru is a data-centric security company that enables enterprises to protect, control, and audit their
Anaplan
Analytics
Anaplan, headquartered in San Francisco, California, provides a business modelling and planning platform in the
BigCommerce
E-commerce
BigCommerce, founded in 2009, is a leading open software-as-a-service (SaaS) ecommerce platform that empowers merchants of all sizes to
BigID
Research and data providers
BigID’s cloud/SaaS data intelligence platform enables organizations to know their enterprise data and take action for privacy, protection
Domo
Analytics
Domo puts data to work for everyone so they can multiply their impact on the
Liferay
E-commerce
Liferay helps organizations solve digital challenges with omnichannel intranet, portal, commerce, and integration
MicroStrategy
Analytics
Founded in 1989, MicroStrategy (Nasdaq: MSTR) is a leading worldwide provider of enterprise software
Moveworks
AI tools
Founded in 2016, the Moveworks AI platform combines advanced machine learning, conversational-AI, and Natural Language Understanding (NLU)
Neo4j
Data platforms
Neo4j is a graph database management system developed by Neo4j
Paramify
Compliance and GRC
The Paramify Cloud (Paramify) is a software platform that automates risk management processes—including compliance planning, solution
ThoughtSpot
Analytics
ThoughtSpot is the Modern Analytics Cloud
BetterCloud
IT management
BetterCloud is the first SaaS Operations Management platform, empowering IT and security teams to define, remediate, and enforce management
Brightcove
Media and content
Brightcove Inc. (NASDAQ: BCOV) was established in 2004 and is a leading global provider of powerful cloud solutions for delivering and monetizing video ac...
Conga
CRM
Since 2006, Conga has been the go-to application provider for Salesforce® users who want to optimize their CRM investment and accelerate
iCIMS
Recruiting
The iCIMS Talent Cloud is a cloud-based talent acquisition platform that helps organizations to attract, engage, and hire the best
Infoblox
Networking
Infoblox's mission is to dramatically simplify complex distributed networking and security by delivering modern, cloud-first networking and
Kaltura
Media and content
Kaltura is one of the leading vendors of video solutions for the end to end video user
Kinsta
Cloud and hosting
Kinsta is an extension of your
Nylas
Scheduling
Nylas is used by developers around the world to quickly and securely build e-mail, scheduling, and work automation features into their
OneSpan
E-signature
OneSpan, the digital agreements security company™, helps organizations accelerate digital transformations by enabling secure, compliant
Rollbar
DevOps and observability
Rollbar is a SaaS application that helps remediate issues in
Why Level 2 matters for SOC 2
No SOC 2 registry exists. A STAR Level 2 attestation is built on a SOC 2 examination, which makes it the strongest free, registry-grade signal that a SOC 2 report exists.