Casco
Casco provides autonomous security testing and penetration testing services for web apps, APIs, and AI systems.
Compliance
Compliance frameworks Casco currently meets or is working toward to uphold their security and privacy commitments.
Resource library
Our security, compliance, and policy documentation, including audit reports.
Controls
Our security program is built on a complete set of controls that govern how we safeguard data and manage risk.
- Vulnerability Management
- Vendor Inventory
- Background Checks
- Trust Page
- Threat Intelligence Management
- Endpoint Encryption
- Mobile Device Management
- Role-based Access
- Multi-factor Authentication
- Incident Response Plan
- Code of Conduct
Subprocessors
Trusted third parties that support our services and may process customer data as part of their function.
Updates
A live record of significant changes, vulnerability disclosures, and other notifications.
FedRAMP resources
Authorization data, documentation, and access records required for FedRAMP authorization and continuous monitoring, available to authorized federal parties.
FedRAMP 20x Certification Package Overview (FRC-CSO-PKG)
August 27, 2026