Comprehensive SOC 2 Type I/II compliance toolkit: trust service criteria checklists, control matrices, risk assessment templates, and audit preparation guides. By Petronella Technology Group.
Example of GCP Landing Zone for US government agency — FedRAMP, NIST, SOC 2, SOX. Generated by Merlin Studio implements the Compiled AI paradigm: LLMs at build time, deterministic code at runtime.
MCP server for SCF Controls Platform — security compliance controls, frameworks, evidence, and risk management for AI agents
TenableTrawler (Cloud OR FedCloud) is a Python project that pulls scan results via the Tenable API, laying them into organized, POAM-ready outputs. It supports various scans and exports in formats like CSV, JSON, and YAML.
Patience - The Chat Bot Testing System
Reference GCP Landing Zone for US financial-services workloads — banks, payment processors, fintechs. Covers SOC 2, PCI-DSS, NIST 800-53, SOX with multi-region foundation. FAST-compatible. Generated by Merlin Studio implements the Compiled AI paradigm: LLMs at build time, deterministic code at runtime.
A curated list of SOC 2 resources: readiness checklists, automation platforms, policy templates, audit firms, cloud security tools, and compliance guides for startups and enterprises
Key Evidence Engine for ISMS management and mapping of real data to framework controls and clauses
A GRC assessment for a fictional company from the Google Cybersecurity Certification course. This has both my original document and an AI revised version using Claude AI.
Free, open-source SOC 2 policy generator: 22 policy templates rendered from a 23-question intake. CLI + templates. Apache-2.0.
Agentic AI GRC automation, cyber risk quantification, 150+ framework cross-mapping, evidence qualification, board decision packs and revenue enablement economics.
Enterprise-grade Windows endpoint hardening, cryptographic audit, and compliance telemetry suite. Aligned with ISO/IEC 27001, ISO/IEC 20000-1, SOC 2 Type II, and CIS Benchmarks.
Multi-tenant AI SaaS platform for risk, culture, and communication management with LLM integration
OWASP LLM Top 10 v2.0 implementations for financial services, insurance, and legal tech: n8n workflows, prompt library, and governance docs.
Free SOC 2 policy templates, registers and checklists in Word, PDF and Excel. CC BY 4.0.
Join ALB access logs with WAFv2 terminating rules - find edge-blocked requests your app never saw, and the exact sub-rule that fired
Exa — independent third-party profile of a public API surface, by API Evangelist. Exa is a neural web search API designed for AI agents and applications. It combines a purpose-built web index with embedding-based retrieval to deliver highly relevant results across categories such as full web, news, companies, research, people, and financials.
Cloud Security Compliance Pipeline for AWS with automated multi-framework governance, Compliance-as-Code, Policy-as-Code and audit reporting using Python, Terraform, OPA/Rego and GitHub Actions.
Synthflow — independent third-party profile of a public API surface, by API Evangelist. Synthflow is an enterprise-ready no-code Voice AI platform for automating phone conversations at scale. The product combines a visual agent designer with in-house telephony, sub-100ms latency, and a 99.99% uptime guarantee, so businesses can build, deploy, and o
Drata — independent third-party profile of a public API surface, by API Evangelist. Drata is a continuous security and compliance automation platform supporting SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, and more, with policies, evidence, and trust center. Drata exposes a public REST API plus the SafeBase Trust API (acquired) and a Custom Connections
To associate your repository with the soc-2 topic, visit your repo's landing page and select "manage topics."