Request for Penetration Test Results or Security Audit Reports for NetApp CVO and BlueXP

[ScottMoser]

Hello NetApp Community,

I'm reaching out on behalf of my organization's security team, who is requesting penetration test results or any available security audit reports for NetApp Cloud Volumes ONTAP (CVO) and BlueXP.

We are current users/evaluating these solutions and need this information to ensure compliance with our internal security standards. If full reports are not publicly available, could you please guide me on the process to obtain them, such as through an NDA or sales contact?

I opened a support ticket 2010571009 and was directed here to post the question.

Any pointers to official documentation, whitepapers, or compliance certifications (e.g., SOC 2 Type 2, ISO 27001) specific to these products would also be greatly appreciated.

Thank you for your assistance!

[chamfer]

Hi @ScottMoser ,

It is sad that NetApp support have passed you onto the community.

These documents are available through the NetApp Trust Center.  You can view which service or platform has been evaluated and which standard they have been evaluated against here https://www.netapp.com/responsibility/trust-center/compliance/netapp-compliance-offerings/ 

You can self-request /download documentation through the NetApp Trust portal here https://trust.netapp.com/ 

If you require a sales contact, you should start here https://www.netapp.com/forms/sales-contact/ 

I hope that this helps!