SaaS Ranking

Certifications named in IT service management

Naming SOC 2 or ISO 27001 publicly is the low bar; not naming them is a signal.

55% here against 48% across every category we measure. IT service management sits above the overall share for this criterion.

Back to Certifications named across all categories, or to IT service management.

Published

SOC 2 or ISO 27001 named on a public page.

VendorWhat we found
Alloy Software https://www.alloysoftware.com/resources/security-statement/
Atlassian https://www.atlassian.com/trust/data-protection
Atomicwork https://www.atomicwork.com/security
Cireson https://cireson.com/tikit/security/
HaloITSM https://www.usehalo.com/security
InvGate https://invgate.com/security
Issuetrak https://www.issuetrak.com/security
iTop https://combodo.com/security/
ManageEngine https://www.manageengine.com/cybersecurity-solutions.html
OTRS https://otrs.com/trust-center/
Rezolve https://www.rezolve.ai/trust
Siit https://www.siit.io/security
SolarWinds https://www.solarwinds.com/trust-center
Symphony SummIT https://www.symphonyai.com/itsm/security-trust
SysAid https://trust.sysaid.com/
Xurrent https://www.xurrent.com/security

No named certification found.

We reached at least one address for each of these vendors and none of them carried it. That is what we found at the addresses we checked, on the date we checked them, and not a statement about what the vendor has.

VendorWhat we found
Deepser 6 addresses checked
EasyVista 6 addresses checked
GLPI 6 addresses checked
Ivanti 6 addresses checked
Jitbit 6 addresses checked
Matrix42 6 addresses checked
Motadata 6 addresses checked
SapphireIMS 6 addresses checked
Serviceaide 6 addresses checked
ServiceNow 6 addresses checked
TOPdesk 6 addresses checked
Track-It 6 addresses checked
Vivantio 6 addresses checked

Not measured

We could not look at these, or their robots.txt asks us not to. That says something about our measurement, not about them, and they are left out of the percentage above.

VendorWhat we found
Spiceworks The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.

Found something we missed? Tell us and the next run picks it up.