Most smart SaaS companies regularly use reputed web application penetration testing services to find and patch security vulnerabilities before they ship a new version of their app. And if you ask them for the latest version of such a report, they will be more than happy to provide it to you - if you're a serious buyer, of course. If you really want some external validation of the level of protection that a SaaS service provider you could try running a free scan of their HTTP security headers. HTTP security headers are the front line of web applications’ defence against hackers. A free vulnerability scanning tool like Cyber Chief will give you a quick indication of how seriously your prospective MarTech vendor takes their app security. Website - www.Audacix.com Address - Waterman Business Centre, Suite 86, U/L, 40/1341 Dandenong Rd, Chadstone VIC 3148