Companies that list CSA STAR. Company attestations (ISO 27001, SOC 2) are held by the firm. Practitioner credentials (OSCP, GPEN) are held by people on staff. We do not audit certificates or invigilate exams.
Is the order paid?
No. Organic order is recency. Promoted shelves are labeled and separate. That is the opposite of buying a rank.
How do I get listed under CSA STAR?
Submit a company and tick the certifications you actually hold. We review before anything is public. Paid plans buy a labeled shelf, not a silent bump in this list.
Why is a staff exam on a company directory?
Buyers shortlist pentest and training firms by who sits on the engagement. OSCP and GPEN are company filters here, not a people directory.
