Snapshot 255843
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Security Certifications & attestations SOC 2 reporting SOC 2 reports are independent attestations governed by the American Institute of Certified Public Accountants (AICPA) that evaluate the design and operating effectiveness of controls which service organizations put in place to protect their assets. These reports are intended to meet the needs of a broad range of users that require detailed information and assurance about the controls at a service organization Request SOC 2 report ISO 27001 ISO/IEC 27001 is a security management standard that specifies security management best practices and comprehensive security controls following the ISO/IEC 27002 best practice guidance ISO 27001 ISO 27001 Statement of Applicability (SOA) ENS (high) Esquema Nacional de Seguridad (ENS) specifies security requirements pertaining to service providers in which government agencies and public organizations in Spain are dependent on. Barracuda’s ENS “High” certification can be verified on the ENS portal. ENS Certification FIPS validation FIPS (Federal Information Processing Standards) are a ruleset that outline methods for how data is handled and processed by encryption algorithms View online DESC CSP Security Standard The Cloud Service Provider (CSP) Security Standard produced by Dubai Electronic Security Center (DESC) sets out requirements and guidance for CSPs and those organizations using any cloud services View online UK Cyber Essentials UK Cyber Essentials specifies security requirements which are designed to protect organisations against the most common internet-based cyber threats Barracuda’s UK Cyber Essentials Certification can be verified on the IASME portal. ISO 27017 (certification in progress) ISO/IEC 27017 specifies security requirements pertaining to cloud services, which supplement the requirements of the ISO/IEC 27001 and ISO/IEC 27002 standards ISO 27018 (certification in progress) ISO/IEC 27018 specifies security requirements pertaining to protection of personally identifiable information (PII) in public cloud services, which supplement the requirements of the ISO/IEC 27001 and ISO/IEC 27002 standards ISO 42001 (certification in progress) ISO/IEC 42001 specifies requirements pertaining to organizations who provide and/or utilize AI-based products or services, ensuring both responsible development and usage of AI systems GovRAMP (authorization in progress) GovRAMP specifies requirements for cloud service providers serving US State, Local, Education and Tribal (SLED) government organizations Barracuda’s listing of authorized and progressing products can be verified on the GovRAMP portal. PCI DSS (SAQ-D attestation in progress) PCI DSS specifies requirements for organizations that process, store, or transmit payment card data CICLON (certification in progress) CICLON is Spain’s official cloud‑product cybersecurity evaluation methodology, created by the National Cryptologic Centre (CCN) to certify the security of SaaS, PaaS, and IaaS solutions deployed in cloud environments CMMC (Level 1 self-assessment in progress) Cybersecurity Maturity Model Certification (CMMC) specifies security requirements which are designed to protect controlled unclassified information and federal contract information that is shared by the US Department of Defense with its contractors and subcontractors Barracuda’s CMMC Certification can be verified on the US Department of Defense SPRS (Supplier Performance Risk System) Show certifications in progress Product security advisories Product security advisories Last updated Barracuda XDR Integration Credentials November 10th, 2026 Pre-Authentication Authorization Bypass and Command Injection Vulnerabilities November 9th, 2026 PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 October 28th, 2026 RCE Vulnerability in Barracuda ESG Appliances – Hotfix Available September 21st, 2026 No Affiliation with “Barracuda” Ransomware Group September 3rd, 2026 Trivy Supply‑Chain Compromise / CloudSEK disclosure August 14th, 2026 Linux kernel Local Privilege Escalation vulnerabilities (Dirty Frag / CopyFail2) May 12th, 2026 Linux kernel Local Privilege Escalation (LPE) May 8th, 2026 RCE vulnerabilities in Barracuda RMM Service Center – hotfix available December 10th, 2025 Salesloft Drift application incident response September 1st, 2025 Microsoft 365 Direct Send attacks August 4th, 2025 Barracuda Email Security Gateway Appliance (ESG) vulnerability January 4th, 2024 Barracuda’s response to ClamAV Security Advisory February 28th, 2023 Barracuda’s response to OpenSSL Security Advisory October 31st, 2022 Barracuda’s response to the Russia-Ukraine crisis March 8th, 2022 Apache Log4j vulnerability December 12th, 2021 Security incident notification If Barracuda becomes aware of any security event that results in the loss, disclosure, or alteration of the Customer Data stored by Barracuda, (“Security Incident”), Barracuda will promptly (1) notify the relevant Customer of the Security Incident; (2) investigate the Security Incident; and (3) take reasonable steps to contain and mitigate the effects of the Security Incident. Barracuda will notify the customer of relevant Security Incidents by a means selected by Barracuda, including via email. Customers must ensure that accurate administrator contact information appears on each applicable Cloud Services portal. Barracuda’s obligation to report or respond to a Security Incident under this section is not an acknowledgement by Barracuda of any fault or liability with respect to a Security Incident. Customers should contact support to report any suspected or known misuse of its Barracuda accounts or authentication credentials, or any other security incident related to a Barracuda product or service. Don’t wait to get protected Get a free consultation with a cybersecurity expert and see Barracuda's cybersecurity solutions in action. Get a Demo Company Information About Us Leadership Our Customers Partner Success Stories Barracuda Insiders Careers Engineering Site Map Products & Solutions BarracudaONE™ Email Protection Data Protection Managed XDR Application Protection Network Protection AI in Cybersecurity Ransomware Protection Contact Us +1 888 268 4772 Contact Sales Contact Support Purchase Request View More Our Websites Barracuda Campus Barracuda Blog SmarterMSP Blog Legal Privacy Notice Website Terms and Conditions Barracuda Terms and Conditions US Law Enforcement Guidelines Website Accessibility Statement Do Not Sell or Share My Personal Information Cookie Settings © 2003 – 2026 Barracuda Networks, Inc. All rights reserved. Partners