Kaspersky reaffirms security with successful SOC 2 Type II audit

Kaspersky has once again successfully passed its SOC 2 Type II audit, a rigorous assessment that validates the integrity of its internal security controls and the processes involved in developing its antivirus databases, as reported by TahawulTech.

The SOC 2 framework, established by the American Institute of Certified Public Accountants, evaluates an organization's commitment to security, availability, processing integrity, confidentiality, and privacy. Kaspersky's audit, conducted by an independent auditor, covered the period from August 2025 to July 2026 and specifically examined the lifecycle of antivirus database development for Windows and Unix operating systems. The assessment involved stakeholder interviews, operational observations, documentation analysis, and re-performance of manual controls.

The auditors concluded that Kaspersky's development, testing, and release processes for its antivirus databases meet SOC 2 requirements and are protected against tampering. This successful audit reinforces Kaspersky's ongoing commitment to transparency and independently verified security practices, complementing its existing ISO/IEC 27001 and Common Criteria certifications.

Source: TahawulTech