Cobalt Achieves CSA AI Trustworthy Pledge

Milestone reinforces Cobalt commitment to transparent cloud security practices and continuous pentesting that supports customer compliance and third-party risk requirements

SAN FRANCISCO--(BUSINESS WIRE)--Cobalt, the pioneer of Penetration Testing as a Service (PTaaS) and a leading provider of human-led, AI-powered offensive security solutions, today announced it has achieved the Cloud Security Alliance (CSA) AI Trustworthy Pledge through completion of the CSA Security, Trust, Assurance, and Risk (STAR) Level 1 CAIQ Self-Assessment based on CAIQ v4.0.3. This milestone confirms alignment with the CSA Cloud Controls Matrix and demonstrates Cobalt’s commitment to transparent, responsible security, and continuous assurance for customers operating in cloud-native environments.

The CSA STAR program is widely recognized by enterprises and regulators as a benchmark for cloud security maturity. Completion of the CAIQ Self-Assessment provides customers, partners, and prospects with clear visibility into how Cobalt approaches governance, risk management, data protection, and secure operations.

“This achievement reflects how Cobalt approaches security in practice, not as a checkbox exercise,” said Andrew Obadiaru, CISO at Cobalt. “The Cobalt Offensive Security Platform is built to provide continuous, real-world assurance through active testing, rather than static documentation. Customers need proof that security controls hold up under attack, and that is exactly what modern pentesting is designed to deliver.”

The Cobalt Platform centralizes access to security services from its team of expert pentesters, making it easier for organizations to find and fix vulnerabilities across their environments. By enabling faster pentest launches, real-time collaboration with testers, continuous scanning, and seamless integration with remediation workflows, Cobalt helps practitioners identify critical issues and accelerate risk mitigation.

The Cobalt Platform also supports common certification and assessment needs–including vendor security reviews, PCI, HIPAA, and SOC 2–helping organizations demonstrate security posture without slowing development teams.

By completing the CSA STAR Level 1 CAIQ Self-Assessment, Cobalt reinforces its commitment to secure cloud operations and transparent security practices, while continuing to modernize how offensive security fits into real-world development and compliance workflows.

About Cobalt

Cobalt is the pioneer in penetration testing as a service (PTaaS) and a leader in human-led, AI-powered offensive security services. We are focused on combining talent and technology with speed, scalability, and expertise. Thousands of customers and hundreds of partners rely on the Cobalt Offensive Security Platform, along with 500+ trusted security experts, to find and fix vulnerabilities across their environments. By enabling faster pentest launches, real-time collaboration with pentesters, and seamless integration with remediation workflows, we help organizations identify critical issues and accelerate risk mitigation so they can operate fearlessly and innovate securely.

Cobalt maintains an outstanding NPS of 9, reflecting its dedication to customer satisfaction. Read our reviews on G2 to see why customers love us. More at https://www.cobalt.io. Follow Cobalt on LinkedIn and X.