---
title: "Does Spur perform penetration testing and vulnerability scanning?"
type: "faq"
url: "https://docs.spur.us/knowledgebase/faqs/does-spur-perform-penetration-testing-and-vulnerability-scanning"
category: "Plans, Support & Compliance"
product: "general"
publishedAt: "2026-09-16T00:00:00.000Z"
updatedAt: "2026-09-16T10:51:33Z"
---

# Does Spur perform penetration testing and vulnerability scanning?

Yes. Spur performs penetration testing at least annually, with a remediation plan tracked to completion, and runs host-based vulnerability scans at least quarterly on all external-facing systems, with critical and high findings tracked to remediation. See trust.spur.us for the full list of published security controls.