Trust Center
Welcome to the Katalon Security Trust Center, where you can find everything you need to know about our commitment to data privacy and security. At Katalon, the privacy and security of your data are our top priorities. We maintain a world-class security program aligned with industry best practices and frameworks to protect your information.
Discover how we support customers across all industry sectors, including highly regulated fields such as Healthcare, Government, Banking, and Financial Services, by adhering to stringent security standards.
Trust Center Updates
PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 - No Impact to Katalon
PHP2Shell Vulnerabilities - No Impact to Katalon Products
The recently disclosed PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) do not affect Katalon True Platform, Katalon Studio, or Katalon Runtime Engine.
Katalon True Platform does not use PHP in its product stack. Katalon Studio and Katalon Runtime Engine use Java-based execution stacks rather than PHP. No PHP2Shell-specific product patch, configuration change, or suspension of use is required for these products.
Our Security and Platform teams continue security monitoring, including review of relevant logs and security alerts, and maintain protective controls across the environments we operate. Within the Katalon environments reviewed to date, we have not identified evidence of compromise or loss of customer data.
For questions, please contact your Katalon account team or security@katalon.com.
Katalon Completes Annual 2026 Independent Security Audit
Katalon achieves ISO/IEC 42001:2023 and completes its 2026 audit cycle.
Katalon, Inc. has completed its 2026 external audit with Consilium Labs, an independent auditor and certification body. This was a single combined audit covering four scopes, concluded in August 2026.
New this year
ISO/IEC 42001:2023 - certification achieved for Katalon's Artificial Intelligence Management System. ISO/IEC 42001 is the international standard for governing artificial intelligence across its lifecycle, covering AI risk management, impact assessment, transparency, human oversight, and accountability. Accredited by the International Accreditation Service (IAS).
This is intended to answer a question we now hear in most security reviews: how does Katalon govern the AI capability inside its platform? It gives you an independent answer rather than our own assurance.
Maintained
-
ISO/IEC 27001:2022 - recertified for Katalon's Information Security Management System. Accredited by the ANSI National Accreditation Board (ANAB).
-
ISO/IEC 27017:2015 - recertified for cloud-specific information security controls. Accredited by ANAB.
-
SOC 2 Type II - examination completed against the American Institute of Certified Public Accountants (AICPA) Trust Services Criteria.
Accessing the documents
The ISO certificates and the SOC 2 Type II report are available through this Trust Center. The SOC 2 Type II report is released under a non-disclosure agreement - use the request option on this page and our team will process it.
Questions: contact your Katalon account team or reach our security team through this Trust Center.