Workstreet, trust center
Security and compliance services firm that prepares clients for the SOC 2 audit through gap analysis, implementation planning and observation period support, and guides them through the external audit rather than signing the opinion.
Workstreet also offers SOC 2 readiness, penetration testing, vCISO, compliance advisory and cloud compliance. This page covers the trust center and security questionnaires side of what they do, because that is what TrustCenter is about.
The listing
| Services | SOC 2 readiness, Penetration testing, vCISO, Compliance advisory, Trust center, Cloud compliance, Security questionnaires |
|---|---|
| Frameworks | SOC 2, ISO 27001 |
| Team size | 100+ |
| Website | workstreet.com |
What to check before you hire them
This is general advice about the kind of work Workstreet offers, not a judgement about the firm. Ask any firm the same questions and compare the answers.
- Software, setup, or someone to run it
- Some providers sell the trust center platform, some set one up for you, and a few run it afterwards: answering the security questions and document requests that come through it. Ask which of those you are buying, who keeps the documents current, and what happens to the page and the NDA records if you leave.
- Answers you can stand behind, not just fast ones
- A firm can fill in a questionnaire quickly, but every answer becomes something your buyer can hold you to. Ask who checks each answer against what you actually do, whether they build an answer library you keep, and how they handle a question where the honest answer is no.
This listing is not written by the firm
It was compiled from public information, so treat it as a starting point rather than a statement from Workstreet. If you work there, claim the listing and it becomes yours to correct. Claiming is free.
Get a quote from Workstreet
Tell us what you need and we will put it in front of Workstreet and the other firms in the directory that match it. There is no charge to you.
Get a quoteBrowse the rest of the list
Workstreet appears on these pages alongside comparable firms.
- Compliance advisory firms in Canada, 7 firms
- Penetration testing firms in Canada, 4 firms
- Security questionnaires firms in Canada, 9 firms
- SOC 2 readiness firms in Canada, 6 firms
- Trust center firms in Canada, 9 firms
- vCISO firms in Canada, 6 firms
Other firms doing this work
TrazTech Inc., ABM Integrated Solutions, Canadian Cyber, Cognisys, GAM Tech, GreenHat Security
How do I know I can trust a firm like this?
Judge the website the way you would judge a report they wrote for you, because it is the only sample of their work you get for free. Four things to look for:
Past work, in specifics. Named clients, case studies, redacted sample reports, published research, CVEs, conference talks. A security or compliance firm that has done the work has something to show for it. A site that describes the service at length and never once shows the output of it is the single biggest red flag on this list.
An address in every country they claim. If a firm says it operates somewhere, it should show a street address there, and named people working from it. A country page with no address, no staff and no local clients is a marketing page, not an office, and the work will be delivered from wherever they actually are. That is fine if they say so, and a problem if they do not.
Writing that could only be about them. Generic copy that could have its name swapped for any competitor's, or the flat and tireless prose of an unedited language model, usually means nobody senior has looked at the page. Ask yourself whether any of it commits them to anything a client could hold them to.
People with names. Who leads the work, what they have done before, and are they findable outside the site. Testing and audit work is done by individuals, and a firm that will not name them is asking you to buy a logo.
None of these is proof on its own. Two or more together is a reason to ask direct questions before you sign anything, and to compare at least three firms. There is a longer version, with what to ask for in each case, on how to vet a firm.
Is this firm recommended by TrustCenter?
No. A listing is not a recommendation. Workstreet carries an unclaimed listing, and nothing on this page is an endorsement of the firm or a statement that it is the right one for you. Compare at least three.
Does Workstreet pay to appear here?
No. This is a free listing. Firms can pay for the Verified tier, and this one has not.
How do I get a quote from them?
Use the form linked above. It goes to the firms whose services match what you describe, which includes this one. You are never charged for a quote.