> For the complete documentation index, see [llms.txt](https://www.penetration-testing.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.penetration-testing.com/compliance-and-regulatory-requirements.md).

# 📋 Compliance & Regulatory Requirements

- [PCI DSS Penetration Testing Requirements: The Complete Compliance Guide](https://www.penetration-testing.com/compliance-and-regulatory-requirements/pci-dss-penetration-testing-requirements-the-complete-compliance-guide.md): Learn PCI DSS penetration testing requirements, key differences from standard pentests, and how to ensure your payment processing systems meet compliance standards effectively.
- [SOC 2 Requirements: What You Need to Know About Compliance and Penetration Testing](https://www.penetration-testing.com/compliance-and-regulatory-requirements/soc-2-requirements-what-you-need-to-know-about-compliance-and-penetration-testing.md): Understanding SOC 2 compliance requirements, the role of penetration testing, and how to build a security program that satisfies auditors and customers alike.
- [Why Compliance Isn't Enough: The Critical Role of Penetration Testing in Modern Cybersecurity](https://www.penetration-testing.com/compliance-and-regulatory-requirements/why-compliance-isnt-enough-the-critical-role-of-penetration-testing-in-modern-cybersecurity.md): While compliance audits provide essential baselines, penetration testing reveals the critical vulnerabilities and cyber threats that regulatory checklists often miss.
- [The Licensing Labyrinth: The Legal Nuances of Open Source, Proprietary, and Commercial Pentest Tools](https://www.penetration-testing.com/compliance-and-regulatory-requirements/the-licensing-labyrinth-the-legal-nuances-of-open-source-proprietary-and-commercial-pentest-tools.md): Spoiler alert: Open source doesn't mean free to use commercially. Learn why software licensing is a critical component of operational risk management for clients and penetration testing firms.