Cloud Application Security Assessment (CASA), Tier 2
CASA is the security standard Google applies to applications that handle sensitive user data. An authorised independent laboratory works through a fixed checklist — authentication and session handling, access control, encryption in transit and at rest, input validation, secret storage, logging and incident response — asks for written evidence on every item, and runs an automated dynamic scan against the live application. It is a review of how the software is actually built and operated, not a questionnaire we fill in ourselves.
- Framework
- CASA Tier 2
- Assessor
- TAC Security
- Scope
- Host Logic admin and web applications
- Evidence items accepted
- 48
- Open findings
- None — every item closed as informational and patched
- Status
- Assessment complete and clean; the assessor’s letter of validation is still pending.
We publish the assessment’s scope and outcome, not the report itself. A security report names the parts of a live system that were probed, which is exactly the map an attacker would want — so it stays with us and the assessor. If you are evaluating Host Logic and need the detail, ask us and we will walk you through it under NDA.
Ask for the detail →