THE FUTURE OF BUSINESS SECURITY & COMPLIANCE

A new
standard.
Fully open.

Assess your company against 18 clear security requirements. Find the gaps, meet the standard, and give clients a report they can review.

Open specification Public scoring rules Verifiable reports
OPEN RULES. PUBLIC RESULTS.
✳✦
A standard you can see.
sock too
ILLUSTRATIVE EXAMPLE
Your standard. On record.

Every answer. Every score.

83/100Example self-reported score
Learn. Implement. Attest.
BUILT FOR BUSINESS.
OPEN TO EVERYONE.
SOCK TOO IN PRACTICE

Put your security work on the record.

Complete the standard. Get a report you can share with clients.

Secure from head to toe — and the sock too.
COMPLIANCE WITHOUT THE HEADACHE

Know the rules.
Get to work.

Six short lessons, 18 requirements, and a report for your clients. Plan 20–30 minutes for the course and assessment; allow more time to address any gaps.

01

Learn the standard.

Learn about access, updates, backups, privacy, incidents, and team responsibilities.

02

Put it into practice.

Answer 18 questions about your current practices. See what meets the standard and what needs work.

03

Make it public.

Once you pass, sign your declaration and download your report. Add the verification badge to your website.

OPEN BY DESIGN
Open to scrutiny.
THIS IS HOW STANDARDS SHOULD WORK

The rules are public.
Your results are, too.

Read every requirement before you start. See exactly how scoring works. Let clients check your answers, score, and certificate status for themselves.

To pass: complete six knowledge checks, implement all six essential controls, and score at least 80%. Your answers are self-reported, not independently audited.

Look up a certificate
CHOOSING A SECURITY STANDARD

Sock Too or SOC 2?

Choose Sock Too for a public, self-service baseline. If a client needs independent CPA assurance, understand what SOC 2 provides. Here’s where each fits.

Read the comparison
HELP SET THE NEXT STANDARD

Adopt Sock Too today.

Give your team a clear security baseline and your clients a report they can review. Start with the requirements and work toward your attestation.

Adopt the standard