Comprehensive SOC 2 Type I/II compliance toolkit: trust service criteria checklists, control matrices, risk assessment templates, and audit preparation guides. By Petronella Technology Group.
Example of GCP Landing Zone for US government agency — FedRAMP, NIST, SOC 2, SOX. Generated by Merlin Studio implements the Compiled AI paradigm: LLMs at build time, deterministic code at runtime.
MCP server for SCF Controls Platform — security compliance controls, frameworks, evidence, and risk management for AI agents
TenableTrawler (Cloud OR FedCloud) is a Python project that pulls scan results via the Tenable API, laying them into organized, POAM-ready outputs. It supports various scans and exports in formats like CSV, JSON, and YAML.
Patience - The Chat Bot Testing System
Reference GCP Landing Zone for US financial-services workloads — banks, payment processors, fintechs. Covers SOC 2, PCI-DSS, NIST 800-53, SOX with multi-region foundation. FAST-compatible. Generated by Merlin Studio implements the Compiled AI paradigm: LLMs at build time, deterministic code at runtime.
Key Evidence Engine for ISMS management and mapping of real data to framework controls and clauses
A GRC assessment for a fictional company from the Google Cybersecurity Certification course. This has both my original document and an AI revised version using Claude AI.
Free, open-source SOC 2 policy generator: 22 policy templates rendered from a 23-question intake. CLI + templates. Apache-2.0.
Multi-tenant AI SaaS platform for risk, culture, and communication management with LLM integration
OWASP LLM Top 10 v2.0 implementations for financial services, insurance, and legal tech: n8n workflows, prompt library, and governance docs.
Free SOC 2 policy templates, registers and checklists in Word, PDF and Excel. CC BY 4.0.
A curated list of SOC 2 resources: readiness checklists, automation platforms, policy templates, audit firms, cloud security tools, and compliance guides for startups and enterprises
Exa — independent third-party profile of a public API surface, by API Evangelist. Exa is a neural web search API designed for AI agents and applications. It combines a purpose-built web index with embedding-based retrieval to deliver highly relevant results across categories such as full web, news, companies, research, people, and financials.
Cloud Security Compliance Pipeline for AWS with automated multi-framework governance, Compliance-as-Code, Policy-as-Code and audit reporting using Python, Terraform, OPA/Rego and GitHub Actions.
SOC 2 Type I and Type II compliance checklist - Trust Services Criteria with control mapping and evidence collection guide
Operator surface for multi-tenant B2B SaaS isolation posture: blast-radius classification, RLS/dedicated-schema/shared-prefix mapping, cross-tenant data-access audit, lateral-movement risk. Browser-only, no telemetry. AGPL-3.0.
Synthflow — independent third-party profile of a public API surface, by API Evangelist. Synthflow is an enterprise-ready no-code Voice AI platform for automating phone conversations at scale. The product combines a visual agent designer with in-house telephony, sub-100ms latency, and a 99.99% uptime guarantee, so businesses can build, deploy, and o
Thoropass — independent third-party profile of a public API surface, by API Evangelist. Thoropass is an auditor-led, AI-powered compliance and audit automation platform that combines software with expert auditor services. Its products span continuous compliance monitoring and alerting, automated evidence collection, a global control library, vulner
Drata — independent third-party profile of a public API surface, by API Evangelist. Drata is a continuous security and compliance automation platform supporting SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, and more, with policies, evidence, and trust center. Drata exposes a public REST API plus the SafeBase Trust API (acquired) and a Custom Connections
To associate your repository with the soc-2 topic, visit your repo's landing page and select "manage topics."