Kenna Security
Security and trust center evidence
Kenna Security is the enterprise leader in risk-based vulnerability
Summary
Kenna Security has 1 registry-verified row, and 1 expired in the CertReports index, last verified 2 Nov 2026. The strongest row is CSA STAR: STAR Level 1 self-assessment (CAIQ). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 2 Nov 2026, CertReports holds 1 registry-verified row and 1 expired row for Kenna Security, drawn from the CSA STAR registry and the Data Privacy Framework list. Kenna Security is listed in the CSA STAR registry for CSA STAR (STAR Level 1 self-assessment (CAIQ)), dated 22 Oct 2020. Kenna Security previously appeared with EU-US Data Privacy Framework evidence, but the listing is no longer active and CertReports found no renewal as of 2 Nov 2026. No public evidence was found for SOC 2, ISO/IEC 27001, HIPAA and GDPR as of 2 Nov 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.
- CSA STAR: STAR Level 1 self-assessment (CAIQ), verified as of 26 Oct 2026
- EU-US Data Privacy Framework: Inactive, expired as of 2 Nov 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Among security vendors
1verified rows
Category median 1, across 172 indexed security vendors. Kenna Security has more verified rows than 42 percent of them.
cyber riskrisk-based securitysecurity platformthreat intelligencevulnerability management
Compare with similar vendors
Pick your own comparisonCompliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports2 evidence rows across 2 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the Security category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Vulcan Cyber
Security
The leader in exposure management and AI security, Tenable cybersecurity solutions reduce cyber risk across IT, OT, cloud, identity &
HackerOne
Security
HackerOne Inc. is a cybersecurity operations technology company managed by certified information system security professionals who conduct
Tenable
Security
Tenable Holdings, Inc. is a cybersecurity company based in Columbia, Maryland
Veracode
Security
Manage application security risks effectively with Veracode's Application Risk Management platform, built for today's AI-driven
Evidence against regulations
All regulations for Kenna SecurityHow much of each regulation’s vendor requirements Kenna Security’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read