soc-2

Comprehensive SOC 2 Type I/II compliance toolkit: trust service criteria checklists, control matrices, risk assessment templates, and audit preparation guides. By Petronella Technology Group.

Example of GCP Landing Zone for US government agency — FedRAMP, NIST, SOC 2, SOX. Generated by Merlin Studio implements the Compiled AI paradigm: LLMs at build time, deterministic code at runtime.

TenableTrawler (Cloud OR FedCloud) is a Python project that pulls scan results via the Tenable API, laying them into organized, POAM-ready outputs. It supports various scans and exports in formats like CSV, JSON, and YAML.

Patience - The Chat Bot Testing System

MCP server for SCF Controls Platform — security compliance controls, frameworks, evidence, and risk management for AI agents

Reference GCP Landing Zone for US financial-services workloads — banks, payment processors, fintechs. Covers SOC 2, PCI-DSS, NIST 800-53, SOX with multi-region foundation. FAST-compatible. Generated by Merlin Studio implements the Compiled AI paradigm: LLMs at build time, deterministic code at runtime.

A GRC assessment for a fictional company from the Google Cybersecurity Certification course. This has both my original document and an AI revised version using Claude AI.

Free, open-source SOC 2 policy generator: 22 policy templates rendered from a 23-question intake. CLI + templates. Apache-2.0.

Free SOC 2 policy templates, registers and checklists in Word, PDF and Excel. CC BY 4.0.

OWASP LLM Top 10 v2.0 implementations for financial services, insurance, and legal tech: n8n workflows, prompt library, and governance docs.

Multi-tenant AI SaaS platform for risk, culture, and communication management with LLM integration

A curated list of SOC 2 resources: readiness checklists, automation platforms, policy templates, audit firms, cloud security tools, and compliance guides for startups and enterprises

Cloud Security Compliance Pipeline for AWS with automated multi-framework governance, Compliance-as-Code, Policy-as-Code and audit reporting using Python, Terraform, OPA/Rego and GitHub Actions.

Exa — independent third-party profile of a public API surface, by API Evangelist. Exa is a neural web search API designed for AI agents and applications. It combines a purpose-built web index with embedding-based retrieval to deliver highly relevant results across categories such as full web, news, companies, research, people, and financials.

Key Evidence Engine for ISMS management and mapping of real data to framework controls and clauses

Carbide — independent third-party profile of a public API surface, by API Evangelist. Carbide (carbidesecure.com) is a compliance-automation and risk-management platform that pairs software with credentialed security advisors to help fast-growing organizations achieve and maintain security certifications and regulatory compliance.

Synthflow — independent third-party profile of a public API surface, by API Evangelist. Synthflow is an enterprise-ready no-code Voice AI platform for automating phone conversations at scale. The product combines a visual agent designer with in-house telephony, sub-100ms latency, and a 99.99% uptime guarantee, so businesses can build, deploy, and o

Thoropass — independent third-party profile of a public API surface, by API Evangelist. Thoropass is an auditor-led, AI-powered compliance and audit automation platform that combines software with expert auditor services. Its products span continuous compliance monitoring and alerting, automated evidence collection, a global control library, vulner

Tugboat Logic — independent third-party profile of a public API surface, by API Evangelist. Tugboat Logic is a security assurance and compliance automation platform acquired by OneTrust in 2021. It supports SOC 2, ISO 27001, HIPAA, GDPR, and NIST. As of 2024, the product has been rebranded under OneTrust's Certification Automation offering; legacy

SOC 2 Type I and Type II compliance checklist - Trust Services Criteria with control mapping and evidence collection guide