Trust Center

Start your security review
View & download sensitive information
Ask for information
ControlK

Welcome to Mosaic's Trust Center. Our commitment to data privacy and security is embedded in every part of our business. Use this Trust Center to learn about our security posture and request access to our security documentation.
Warburg Pincus LLC-company-logoWarburg Pincus LLC
CVC-company-logoCVC
New Mountain Capital-company-logoNew Mountain Capital
Investcorp-company-logoInvestcorp
Oakley Capital-company-logoOakley Capital
Bridgepoint-company-logoBridgepoint
CapVest-company-logoCapVest
Evercore-company-logoEvercore
The Riverside Company-company-logoThe Riverside Company

Documents

Featured Documents

DOCUMENTSMosaic Cloud Security Overview
Knowledge Base (FAQ)
  • What is Mosaic's RPO?
  • What is Mosaic's RTO?
  • Are staff required to use a password manager?
  • How regularly are systems, logs and events monitored for evidence of a cyber security incident?
  • Does your organization restrict administrative access to desktops, laptops, phones and tablets for all employees and third parties?
View more
Trust Center Updates

Mosaic Updates

Copy link
General

Mosaic Publishes Latest Penetration Test Results – No Vulnerabilities Found

We’re pleased to share that Mosaic has successfully completed its most recent Web Application Penetration Test, conducted by the independent cybersecurity firm Zaviant. The assessment resulted in zero identified vulnerabilities, reaffirming the strength of our application’s security posture.

Key Highlights

  • No vulnerabilities found across any severity category: critical, high, medium, low, or informational.
  • Full-scope testing covered unauthenticated and authenticated user roles (Org User, Org Admin, Super Admin).
  • Core functionality, including file uploads, AI-powered model ingestion, and authentication mechanisms (SSO and MFA), was thoroughly tested with no issues discovered.
  • Security best practices were observed throughout the application and supporting infrastructure, with Zaviant confirming strong resilience to attack.

This assessment was conducted in accordance with the Penetration Testing Execution Standard (PTES) methodology, encompassing reconnaissance, vulnerability analysis, exploitation attempts, and post-exploitation analysis.

The final report is now available for review in our Trust Center.

We remain committed to transparency and proactive risk management. Regular third-party assessments help ensure Mosaic continues to meet the highest standards of application security.

For any questions about the report, please contact us at support@mosaic.pe.

If you need help using this Trust Center, please contact us.
Contact support
If you think you may have discovered a vulnerability, please send us a note.
Report issue
Built onSafeBase by Drata Logo