Has a customer ever asked you for a pentest report or security questionnaire before signing?

1. Yes, it's now a regular thing
2. Yes, happened once and caught us off guard
3. Not yet but I know it's coming
4. Never — our customers don't ask

Curious how common this is for teams here. Customer security reviews used to be something only enterprise deals triggered. Now we're seeing it happen at Series A and even seed stage, especially if the buyer is in fintech, health, or HR.

If you voted yes: how did you handle it? Did you scramble or did you have something ready?