Levels FYI Inc.

Levels FYI Inc.

Levels.fyi helps employees and employers determine their compensation.

High risk. Significant audit integrity concerns detected. Recommend obtaining an independent compliance assessment before vendor engagement.

Overall score
38 / 100
Grade: D
Why this score
  • Audit Integrity
    Impact High • 35% of score
    15
  • Compliance Coverage
    Impact Medium • 25% of score
    35
  • Infrastructure & Security
    Impact Medium • 20% of score
    80
  • Transparency & Governance
    Impact Medium • 20% of score
    40

Top risks

  • Audit database match
    Company found in leaked database of template-based audit reports
    Audit Integrity
  • Type 2 report flagged
    Type 2 reports require observation period testing - template usage is more concerning here
    Audit Integrity
  • Auditor credibility
    Audit performed by firm flagged for systematic template reuse
    Audit Integrity
Infrastructure
AWS
Report details
Observation period
August 29, 2025 - November 29, 2025
Report types
SOC 2 Type 2
Report count
1

Dimensions

Each dimension is scored 0–100 (higher is better). Weight is how much it contributes to the overall score.
Audit Integrity
Impact: HighWeight 35%
Low
15 / 100
Signals (3)
  • Flag
    Audit database match
    Company found in leaked database of template-based audit reports
  • Flag
    Type 2 report flagged
    Type 2 reports require observation period testing - template usage is more concerning here
  • Flag
    Auditor credibility
    Audit performed by firm flagged for systematic template reuse
Compliance Coverage
Impact: MediumWeight 25%
Moderate
35 / 100
Signals (2)
  • Info
    Single framework
    SOC 2 report found, from a flagged source
  • Info
    Report recency
    Reports dated within Jan-Dec 2025 observation window
Infrastructure & Security
Impact: MediumWeight 20%
High
80 / 100
Signals (3)
  • Good
    Web presence
    Company maintains a public website
  • Good
    Transport encryption
    Website configured with HTTPS
  • Good
    Cloud infrastructure
    Hosted on AWS - enterprise-grade infrastructure with native security controls
Transparency & Governance
Impact: MediumWeight 20%
Moderate
40 / 100
Signals (2)
  • Info
    Service description available
    System description found in audit reports
  • Flag
    Exception reporting
    Zero exceptions reported across all audit periods - statistically improbable, suggests inadequate testing