Trust Center
CoStar's Visual Lease helps simplify lease portfolio management, providing a robust and intuitive SaaS platform that takes the complexity out of managing a company's lease portfolio, from real estate to equipment and other assets. The platform streamlines the process of gathering, interpreting, and reporting on lease data to make lease administration and accounting more efficient, consistent. and precise.
As the centralized system of record for all lease-related financial, operational, and legal data, Visual Lease adapts to client needs and integrates with existing enterprise resource planning solutions, financial systems, and third-party applications for maximum flexibility and ease of use.
Trust Center Updates
PHP2Shell (October 2026)
CoStar Group, Inc. (“CoStar”) is aware of the PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (“PHP2Shell”).
Following publication of fixes on October 21, 2026, CoStar initiated its vulnerability management procedures and deployed web application firewall protections where applicable. Mitigations and fixes are being applied to affected systems, prioritized by risk and exposure. CoStar has also contacted relevant service providers and partners to confirm their exposure and remediation status.
CoStar is monitoring for indicators of compromise. Based on its investigation to date, CoStar has not identified evidence that these vulnerabilities have been exploited in its environment or that client data or services have been affected. No client action is being requested at this time. CoStar’s review is ongoing.
CoStar is committed to protecting its clients and their data. Further updates will be provided as appropriate.
CoStar for Lenders is now CoStar Debt Solutions
CoStar for Lenders is now CoStar Debt Solutions. As part of this transition, the new product name will be updated across the Trust Center, including security control descriptions, documentation, policies, and compliance reports.
An Updated Certificate of Liability Insurance is available
CoStar Group has completed its annual insurance program renewal, and an updated Certificate of Liability Insurance is now available in our Trust Center. Our cyber insurance policy, underwritten by CNA and brokered through Marsh USA LLC, has been renewed for the July 1, 2026 – July 1, 2027 policy period with a $10 million limit, reflecting our continued commitment to maintaining a robust risk transfer program as part of our broader security and resilience posture.
You may download the current certificate directly from this portal to support their vendor due-diligence and third-party risk management processes.
An Updated Visual Lease SOC 1 Type 2 is now available
Visual Lease SOC 1 Type 2 attestation report for the examination period from November 1, 2025 to April 30, 2026 has been uploaded for your review. The report and accompanying bridge letter can now be downloaded via the Visual Lease Trust Center.
Visual Lease anticipates publishing an additional SOC 1 Type 2 attestation report for the examination period from May 1, 2026 to October 31, 2026 in Q4 2026.
An Real Estate Manager Updated SOC 1 Type 2 is now available
CoStar Real Estate Manager's SOC 1 Type 2 attestation report for the examination period from April 1, 2025 to March 31, 2026 has been uploaded for your review. The report and accompanying bridge letter can now be downloaded via the CoStar Real Estate Manager Trust Center.
CoStar Real Estate Manager anticipates publishing an additional SOC 1 Type 2 attestation report for the examination period from October 1, 2025 to September 30, 2026 in Q4 2026.