Trust Center

Updates

Changes to our security posture, newest first. A key change is always explained here.

  1. Planned

    SOC 2 auditor decision

    Choosing an audit firm. We will name it and a time window here once signed. Details

  2. In progress

    Third-party penetration test scheduled

    An external firm tests Bolt in October 2026. The summary will be published here. Details

  3. In place

    Release signing key rotated

    Precautionary; no compromise of the previous key is known. v0.1.165 is the first release signed by the new key. Details

  4. In progress

    Penetration test booked

    Engagement booked with an external firm. Details

  5. In place

    Google CASA assessment published

    Passed by an authorized lab. Restricted Gmail access granted on the Letter of Validation. Details