soc2-compliance

Endpoint evidence for SOC 2, ISO 27001, HIPAA & GDPR. Collect locally on Windows, macOS & Linux. Self-host or sync to a centralized dashboard. Free tier.

Production-grade NestJS boilerplate for regulated industries. Features JWT RS256 with rotation, DB-driven RBAC, Drizzle ORM, and append-only Audit Logging. Security-first architecture for Fintech and Healthtech.

Zero-trust API firewall and security integrity layer for autonomous AI agents & Model Context Protocol (MCP) tool execution. Secure, TOCTOU-proof, fail-closed.

Open-source SOC 2 evidence puller for AWS. Pulls CloudTrail, IAM, GuardDuty, Security Hub, Config into a dated CSV bundle. Part of the AuditReady toolkit (vanta alternative, drata alternative).

SOC 2 Type I and Type II compliance checklist - Trust Services Criteria with control mapping and evidence collection guide

Enterprise AI Security Gateway & Zero-Leakage Data Governance Proxy for LLMs. Developed by Samitha Tharanga Wijesinghe (ST Imagix).

Enterprise Private VPC Terraform Modules, Kubernetes Umbrella Helm Charts & Air-Gapped Governance Stack for Fortune 500 AI Agent Fleets

A DevSecOps DevSecOps data pipeline that utilizes SHA-256 cryptographic hashing to mathematically verify document provenance and prevent RAG data poisoning before vectorization

Production-grade multimodal document intelligence engine combining Vision Language Models (VLMs), spatial layout analysis, deterministic Pydantic mathematical cross-validation, and dynamic HITL review.

Open-source AI agent security gate: deterministic ALLOW/BLOCK/ESCALATE authorization before every tool call, plain-English policy compilation, tamper-evident audit ledger. MCP security gateway + Claude Code/Cursor guardrails. Rust, Apache-2.0.

Build secure NestJS APIs using Drizzle ORM for type-safe database access with integrated CI/CD and test coverage.

A complete SOC 2 template library — policies, process documents, and evidence explanations, free and open source under MIT. Formerly sold at security-docs.com.

Automated SIEM log parser, privilege escalation extractor, and SOC 2 Type II audit logging engine for high-throughput enterprise log streams.