Software security certs are not helping. Who are we kidding? [pdf] (info.varonis.com)

Software vendors: “After several months, we finally received our Soc 2 certification!”

Also Software vendor: “Due to a recent security incident, some of our customer data was compromised..”