Skip to content

Standard

SOC 2 Type II

An AICPA audit standard attesting that a service organization's security, availability, and confidentiality controls operated effectively over a review period.

Known aliases

  • SOC 2

Current stories

securityOne report1 publisher

An ASD-endorsed assessor ran the entire JFrog platform against the ISM at Protected level

IRAP produces a report rather than a certificate, so every Australian agency still makes its own Authority to Operate call. What has changed is the scope of what gets assessed: binary storage and model registries, not just the finished app.

Publishers:jfrog.com

Reality

Evidence26
Adoption20
Hype gap+28
Incentives92
Confidence42
buildOne report1 publisher

Claude Opus 5 at $5/$25: the agent-loop math the rate card does not show

List is $5 per million tokens in and $25 out, with a 1M-token window. The figures that decide an agent budget come from multiplying those against turn counts and Anthropic's rate limit tiers.

Publishers:dev.to

Reality

Evidence20
Adoption20
Hype gap+42
Incentives72
Confidence24
productConfirmed3 publishers

Wispr's $280M round buries the more useful disclosure: its dictation got worse

The startup says a new model, Canto, will cut error rates from 30% to under 10% after weeks of user complaints. It is also entering meeting notes, where three incumbents already sit.

Perspective Coverage

3 publishers
Builder
Builder 32%
Operator
Operator 23%
Investor
Investor 45%

Reality

Evidence55
Adoption63
Hype gap+34
Incentives80
Confidence58
buildOne report1 publisher

Microsoft ships an MIT-licensed agent kernel: policy rings, Ed25519 identity, kill switch

Agent Governance Toolkit puts policy checks in the execution path rather than the prompt. The seam: the kernel is middleware inside the agent's process, so containers still do the isolating.

Publishers:dev.to

Reality

Evidence24
Adoption
Not scored
Hype gap+46
Incentives72
Confidence28
investOne report1 publisher

Blackbird funds a finance agent whose main feature is the paper trail

Sterling raised NZ$3.8m to run invoice processing and month-end close. The load-bearing design choice is not the model. It is the log and the escalation rule.

Reality

Evidence32
Adoption18
Hype gap+28
Incentives78
Confidence34
buildOne report1 publisher

Amp got SOC 2 Type II without pull requests, which kills a convenient excuse

The AICPA's change-management criterion asks whether changes are authorized, tested and approved, not whether a second engineer clicked approve. Amp says its auditors agreed.

Publishers:runtimewire.com

Reality

Evidence42
Adoption22
Hype gap+28
Incentives74
Confidence48