SaaS Ranking

Certifications named in Monitoring and observability

Naming SOC 2 or ISO 27001 publicly is the low bar; not naming them is a signal.

22 of 48 companies we measured here publish it, that is 46%. Last checked 2026-10-16.

46% here against 24% across every category we measure. Monitoring and observability sits above the overall share for this criterion.

This page counts companies, not product entries: a company with two products in this category is one company here and two rows below.

Back to Certifications named across all categories, or to Monitoring and observability.

The evidence at a glance
  • Found22
  • Not found at checked addresses26
  • Not measured1

49 companies in total. Unmeasured companies are excluded from the published share.

Published

SOC 2 or ISO 27001 named on a public page.

VendorWhat we found
Better Stack https://betterstack.com/securityChecked
Checkly https://www.checklyhq.com/security/Checked
Chronosphere https://trust.paloaltonetworks.com/Checked
Coralogix https://trust.coralogix.com/Checked
Dash0 https://www.dash0.com/securityChecked
Datadog https://trust.datadoghq.com/Checked
Dynatrace https://trust.dynatrace.com/Checked
Elastic https://www.elastic.co/trustChecked
Grafana Labs https://grafana.com/security/Checked
Honeycomb https://trust.honeycomb.io/Checked
Netdata https://learn.netdata.cloud/docs/security-and-privacy-designChecked
OneUptime https://oneuptime.com/Checked
OpenObserve https://openobserve.ai/legal/security-compliance/Checked
Pingdom https://www.pingdom.com/security/Checked
Pydantic https://pydantic.dev/securityChecked
Rollbar https://docs.rollbar.com/docs/securityChecked
Sentry https://sentry.io/security/?Checked
Site24x7 https://trust.site24x7.com/Checked
Splunk https://customertrust.splunk.com/Checked
StatusGator https://statusgator.com/trustChecked
Sumo Logic https://www.sumologic.com/solutions/securityChecked
UptimeRobot https://uptimerobot.com/security/Checked
No named certification found.

We reached at least one address for each of these vendors and none of them carried it. That is what we found at the addresses we checked, on the date we checked them, and not a statement about what the vendor has.

VendorWhat we found
Avada Q-Guard 6 addresses checkedChecked
Bugsnag 6 addresses checkedChecked
CloudBolt StormForge 6 addresses checkedChecked
Cronitor 6 addresses checkedChecked
Enteros 6 addresses checkedChecked
Greptime 6 addresses checkedChecked
GridGain Control Center 6 addresses checkedChecked
HyperDX 6 addresses checkedChecked
Last9 6 addresses checkedChecked
Logz.io 6 addresses checkedChecked
Metoro 6 addresses checkedChecked
Middleware 6 addresses checkedChecked
MonSpark 6 addresses checkedChecked
New Relic 6 addresses checkedChecked
OnlineOrNot 6 addresses checkedChecked
Parseable 6 addresses checkedChecked
Pulsetic 6 addresses checkedChecked
Raygun 6 addresses checkedChecked
Sazabi 6 addresses checkedChecked
Sematext 6 addresses checkedChecked
ServicePilot 6 addresses checkedChecked
SigNoz 6 addresses checkedChecked
SpeedCurve 6 addresses checkedChecked
StatusCake 6 addresses checkedChecked
Xitoring 6 addresses checkedChecked
Zabbix 6 addresses checkedChecked
Not measured

We could not look at these, or their robots.txt asks us not to. That says something about our measurement, not about them, and they are left out of the percentage above.

VendorWhat we found
Graylog The vendor’s server blocked or rate-limited our crawler, so this was not measured.Checked

Other criteria in Monitoring and observability

Certifications named in related categories

Found something we missed? Tell us. A correction moves that vendor into our next nightly run. That run reads the same fixed addresses we check for every vendor, not the address you send.