Hello Wowza Community! I’m pleased to announce some recent certifications that we have achieved!
Wowza has completed an ISO/IEC 27001 certification with a third-party audit firm, validating our commitment to critical security standards to protect and secure client data. For what the certificate covers and how to request it for a vendor risk review, visit Wowza ISO 27001 Certification | Wowza Security
Key information:
- Certification by A-LIGN, an ANAB- and UKAS-accredited certification body, valid through August 20, 2029
- A certified scope covering how Wowza builds, patches, and supports Wowza Streaming Engine and Flowplayer OVP
- Audited control areas, including access management, secure development, and vulnerability management
- How the certification applies to self-hosted Wowza Streaming Engine deployments
Request the certificate by emailing security@wowza.com
Wowza Is SOC 2 Type II Attested
Wowza holds a SOC 2 Type II report from an independent CPA firm. For what the examination tested and how security, procurement, and vendor risk teams can request the full report, visit Request Wowza's SOC 2 Type II Report | Wowza Security
This report and audit includes:
- An unqualified opinion from A-LIGN
- Coverage for the Security and Availability trust services criteria
- How Wowza builds, patches, and supports Wowza Streaming Engine and Flowplayer OVP
Request the report by emailing security@wowza.com
SOC 2 Type II vs. ISO 27001: What Each Credential Proves About a Video Infrastructure Vendor
Security and procurement teams increasingly ask software vendors for both a SOC 2 Type II report and an ISO/IEC 27001 certificate. The two documents prove different things. Mike Vitale’s new guide explains the difference and how each credential applies to software that runs on-premises, at the edge, or as a managed service.
The guide covers:
- Why SOC 2 is an attestation from a CPA firm, while ISO/IEC 27001 is a certification from an accredited body
- What SOC 2 Type I and Type II examinations test, and what an unqualified opinion means
- The five Trust Services Criteria and the ISMS requirements behind ISO/IEC 27001
- How to verify a certification body’s accreditation
- What vendor credentials cover when software runs on customer infrastructure
Wowza is SOC 2 Type II attested and ISO/IEC 27001:2022 certified, read the full guide here: SOC 2 Type 2 vs ISO 27001: What Each Proves | Wowza
