Security Overview Compliance Updates
About WireMock Cloud

WireMock.io is a modern API mocking and simulation platform for cloud-native and distributed systems. It enables fast, reliable testing by removing dependencies on unstable third-party APIs and services that don’t yet exist. WireMock.io supports mocking via code, OpenAPI, JSON mappings traffic recording, with precise request matching and dynamic responses.


Its CLI/runner hybrid mode makes it easy to run locally, in CI, or at scale, while AI-powered features accelerate stub creation and maintenance. Built for teams, WireMock.io integrates seamlessly into CI/CD with extensibility, collaboration, and governance baked in.

Compliance Request Access to Private Documents
2 Results
Documents that summarizes our adherence to laws, regulations, and internal policies, helping ensure transparency, risk management and legal conformity
SOC 2
2025
SOC 2
2026
Product Security
WireMock.io is designed and operated with security as a core requirement. The platform follows a secure software development lifecycle and change management process supported by documented security policies. Controls are designed to protect customer data and support secure access to the service. Backed by Secure Software Development Lifecycle Policy, System Change Policy, and tested controls.
Risk Profile
WireMock.io maintains a formal risk management program to identify, assess, and mitigate risks to in scope systems. Risk assessments are performed at least annually and consider information security, application security, compliance, and fraud. Identified risks are reviewed by management and addressed through defined mitigation strategies. Backed by Risk Assessment Policy and annual testing.
Corporate Security
Corporate security controls govern employee access, internal systems, and operational processes. Employees receive security awareness training at least annually and access is granted based on defined roles and responsibilities. Policies are reviewed and approved by management on a recurring basis. Backed by Personnel Security controls, training records, and policy reviews.
Reports
WireMock Inc. has completed a SOC 2 Type II examination covering controls relevant to security. The assessment was performed by an independent auditor and evaluated both the design and operating effectiveness of controls. WireMock also engages an independent third party to perform annual penetration testing. SOC 2 reports and penetration test summaries are available to customers and prospects upon request and subject to NDA.
Access Control
Access to systems and data is governed by a documented access control policy. Role based authorization and the principle of least privilege are used to determine access. Account and access reviews are performed at least annually to verify continued appropriateness. Backed by Access Control Policy and tested access reviews.
Policies
WireMock.io maintains a comprehensive set of security and privacy policies, including policies covering access control, incident response, risk management, vendor management, and secure development. Policies are reviewed at least annually and approved by management. Backed by policy inventory and annual review controls.
Data Privacy
WireMock.io is committed to protecting customer data and limiting data access to what is necessary to provide the service. Data handling practices are governed by documented policies and contractual commitments. Access to customer data is restricted based on role and business need. Backed by Data Management Policy and access controls.
Infrastructure
WireMock.io operates on cloud based infrastructure hosted by a subservice organization. Infrastructure security, availability, and environmental controls are supported through a combination of WireMock controls and complementary subservice organization controls. Subservice organization assurance reports are reviewed by management. Backed by SOC 2 subservice carve out model and AWS controls.
Data Security
Customer data is protected through layered technical and administrative controls. All system communications use encrypted connections. Logical isolation and access restrictions are enforced to reduce the risk of unauthorized access. Backed by system architecture and security controls.
Endpoint Security
Company managed endpoints are protected using security controls including malware protection and device security measures. Endpoint security controls are monitored and reviewed as part of ongoing security management activities. Backed by endpoint protection testing results.
Legal
WireMock Inc. works with legal counsel to support compliance with applicable laws, regulations, and contractual obligations. Security, privacy, and customer commitments are documented in service agreements and reviewed on a recurring basis. Backed by contract review and governance controls.
Network Security
Network security controls are implemented to protect systems from unauthorized access. These controls include monitoring, logging, and restricted access based on role and function. Network activity is monitored and alerts are reviewed according to defined procedures. Backed by Network Security Policy and monitoring controls.
Trust Center Updates
Wiremock has attained SOC 2 Type 2 Compliance

We are proud and excited to announce that the Wiremock has achieved SOC 2 Type 2 compliance. SOC 2 Type 2 compliance requires an ongoing commitment to security and privacy practices and demonstrates our dedication to protecting our customers' data. We have uploaded the SOC 2 Type 2 report to our trust portal for our customers' reference.

Trust Center Launch

Introducing the Wiremock Trust Center, our latest initiative for openness in security practices and developments. Here, we will consistently update you on our measures to secure your data, our responses to emerging threats, and our compliance with regulatory standards. Have confidence in our unwavering commitment to the protection of your information and remain updated with the newest advancements in data security.

Have questions or found a bug? Click Contact Support to reach out to us!
Change Password
Enter your current password then type a new secure password for your account.









My Documents
Request Additional Documents