cPacket Trust Center
Security and compliance are foundational to how cPacket protects data, supports resilient operations, and serves our customers, partners, and employees.
Compliance Posture, Certifications & Attestations
Current certifications, attestations, validation programs, and framework reviews maintained or pursued by cPacket.
SOC 2 Type II
Security, Confidentiality, and Availability Trust controls audited by an independent third party.
FIPS Validated
cPacket's cryptographic module and products are validated to meet U.S. federal and government security standards.
View FIPS validation references below.
Common Criteria (CC)
cPacket's Network Observability and Security Suite of products, as a distributed system to meet NDcPP security standards.
AWS Well-Architected
cPacket's cCloud suite of products is designed after AWS best practices for security, reliability, and operational excellence.
Trust & Company Resources
Request cPacket Compliance and Security policies, plans & practices and certifications.
Security Vulnerability
Compliance & Security
Compliance References
Independent validation and certification references for cPacket cryptographic modules, algorithms, and entropy validation.
Cryptographic Module and Entropy Certifications (CMVP)
FIPS 140-2 cVu16100_TAA Certification (CMVP): #4736
Security Controls Overview
Our comprehensive security program includes continuous monitoring and implementation of industry best practices across all operational areas.
Access Security
Multi-factor authentication (MFA) required for all systems
Role-based access control (RBAC) implementation
Single sign-on (SSO) integration
Quarterly access reviews
Network Security
Network segmentation and micro-segmentation
Intrusion detection and prevention systems (IDS/IPS)
Vulnerability management and patching program
Periodic penetration testing and assessments
Incident Response & Security Policies
Information Security Policy
Physical Security Policy
Network Security Policy
Annual security awareness training for all employees
Security operations and monitoring
Documented incident response procedures
Rapid containment and remediation
Post-incident analysis and lessons learned
Confidentiality Controls Overview
Our comprehensive confidentiality program includes data classification, access mechanisms, and treatment practices that are based on NIST and industry best practices.
Data Classification and Protection
Well-defined data classification levels (Public, Internal, Confidential, and Restricted)
Secure data access, disposal, and sanitization procedures
Encryption in transit and at rest
Data loss prevention (DLP) mechanisms
Automated backup and recovery processes
Organizational Management
Controlled environment policy and practices
Annual reviews of policies
Comprehensive change management processes
Third-party security assessments and checks
Risk Management & Business Continuity Overview
Our enterprise risk management framework supports continuous identification, assessment, and mitigation of security and operational risks.
Risk Treatment
Well-defined risk assessment and scoring procedures
Business impact analysis and risk treatment procedures
Continuous threat landscape monitoring
Vulnerability scanning and assessment
Business Continuity
Comprehensive business continuity planning and disaster recovery procedures
Regular disaster recovery testing and validation
Redundant systems and failover capabilities
Crisis communication and stakeholder notification
Vendor Management
Comprehensive vendor security questionnaires
Third-party risk assessments and due diligence
Ongoing monitoring of vendor security posture
Contractual security requirements and SLAs
Third-Party Assessments Overview
We engage independent third parties to validate our security controls and compliance posture.
Independent Assessments
Annual SOC 2 audits by certified public accounting firms
Penetration testing by accredited cybersecurity firms
Vulnerability assessments through automated and manual testing
Code security reviews by peers for production / customer-facing applications
Infrastructure security reviews for cloud and on-premises environments
Compliance Contacts
For a specific policy or plan, compliance inquiry, security question, incident report, or business continuity request, contact the appropriate cPacket team below.
Compliance matters and policy or plan requests: compliance@cpacketnetworks.com
Learn more about cPacket solutions.
Upgrading your network observability tools? Considering AI-guided operations? Our team can answer your questions and help solve your toughest challenges.
