Help centre
Help Centre
What SecureRoot needs from you, and what to expect, at each step of a security test or a SOC 2 or ISO 27001 readiness programme. For how the work itself is done, see the guides on the blog and the service pages.
Before, during and after a penetration test.
Security testing
What Information Do You Need for a VAPT Proposal?
What to send before a penetration testing quote: why you are testing, each surface and its size, the environment and contacts. No credentials yet.
Preparing Test Accounts and a Staging Environment
How to prepare for a penetration test: test accounts per role, seeded data, a staging environment, safe credential handover, MFA and rate limits.
Understanding Your Findings and the Retest
How to read a SecureRoot findings report: CVSS v4.0 grade, business impact, proof of concept and remediation, and how the included retest closes a finding.
Working with SecureRoot on SOC 2 and ISO 27001, and on both at once.
Compliance readiness
Your Responsibilities in a SOC 2 Readiness Engagement
What your team supplies and decides in a SecureRoot SOC 2 readiness engagement, phase by phase, and what stays with you and the CPA firm.
Preparing Evidence for an ISO 27001 Certification Audit
What Stage 1 and Stage 2 of an ISO 27001 audit look at, and how to organise evidence by clause and control: records versus documents, and sampling.
Requesting a Combined Security Testing and Compliance Engagement
What to send SecureRoot when you need penetration testing and SOC 2, ISO 27001 or DPDP Act readiness together, and how the work is scoped and quoted.