With Gartner predicting that 45% of organizations will have experienced attacks on their software supply chains this year (2025)—a threefold increase from 2021—organizations need to be confident that their partners uphold the highest security standards. Earlier this year, we achieved our SOC 2 Type 2 Compliance certification, and our commitment to security and data protection hasn’t slowed.
Today, we are excited to announce the launch of the ActiveState Trust Center, a comprehensive resource for visibility into our security practices, compliance certifications, and privacy commitments.

What’s in the ActiveState Trust Center?
Whether you’re evaluating ActiveState for the first time or you’re an existing customer seeking the latest information, users can gain access to various resources and documents, including:
- Resources – The Trust Center hosts a variety of critical resources, both publicly available and upon request, including our SOC 2 Type 2 audit report and the results of third-party penetration testing.
- Controls – The list of safeguards and procedures put in place around information security and personal data.
- Subprocessors – The list of third-party data subprocessors we work with and how we use them.
- FAQ – An FAQ is also provided for quick answers to commonly asked questions our Information Security team receives from prospective customers.
What This Means for ActiveState Customers
The launch of our Trust Center comes at a pivotal time as we’ve recently introduced our secure container offering, ActiveState Secure Containers, designed to help organizations securely deploy and manage open source vulnerabilities in containerized environments. As we continue to expand into the container market, demonstrating our internal security posture becomes essential, serving as proof that we practice what we preach.
For our customers, the ActiveState Trust Center translates into:
Enhanced Trust and Transparency: You gain greater insight and confidence in ActiveState’s commitment to protecting your critical data and maintaining secure operations.
Streamlined Compliance and Due Diligence: Reports such as our SOC 2 report significantly reduce the effort required for your own security audits and vendor risk assessments, demonstrating our adherence to leading industry best practices.
A Secure Foundation for Your Software Supply Chain: By partnering with a SOC 2 Type 2 compliant provider that prioritizes intelligent remediation, you strengthen the security posture of your own applications and development pipelines.
Explore The Trust Center Today
Ready to explore the ActiveState Trust Center? We invite you to explore and see how ActiveState’s commitment to security and compliance can support your organization’s goals. As we evolve, so too will the Trust Center, ensuring it remains a valuable resource for understanding how ActiveState provides data security. Our team will regularly update the platform with any new certifications, updates, or additional resources.
For additional information or questions regarding the ActiveState Trust Center and its contents, please contact security@activestate.com