SOC 2 as a Service or a Scam

A compliance startup allegedly sold hundreds of companies fake SOC 2 reports. If the allegations hold up, it's one of the most brazen examples of assurance fraud I've seen in years—and it raises serious questions about how we've built the trust infrastructure around these certifications.