insurance solves the SOC2 theatrics
the party providing the approval stamp should be willing to price and cover the downside of a security breach
if the risk of underwriting outweighs willingness to pay premiums, it is clear what the true cybersecurity posture of a business is
There’s been a lot of allegations against Delve.
But we haven’t been able to share our side of the story until today due to ongoing cybersecurity and forensics investigations.
Maintaining customer trust is central to everything we do.
That said, we grew too fast and fell short of our own standard. To our customers, we deeply apologize for the inconveniences caused.
We take these allegations seriously and have made changes: a new auditor network, free re-audits and pentests for all customers, enhanced transparency in audit communications, and more.
However, we also want to set the record straight on the anonymous attacks.
The evidence we have points to a targeted cyberattack from a malicious actor, not a “whistleblower.”
We believe the attacker purchased Delve under false pretenses, exfiltrated internal company data, and used it to launch a coordinated smear campaign.
The posts rely on a mix of fabricated claims, cherry-picked screenshots, and stolen data taken out of context.
See the link in the comments for more details.
Delve was built to modernize compliance. We are not going anywhere and are committed to building what's next.
