Comprehensive SOC 2 Type I/II compliance toolkit: trust service criteria checklists, control matrices, risk assessment templates, and audit preparation guides. By Petronella Technology Group.

Example of GCP Landing Zone for US government agency — FedRAMP, NIST, SOC 2, SOX. Generated by Merlin Studio implements the Compiled AI paradigm: LLMs at build time, deterministic code at runtime.

TenableTrawler (Cloud OR FedCloud) is a Python project that pulls scan results via the Tenable API, laying them into organized, POAM-ready outputs. It supports various scans and exports in formats like CSV, JSON, and YAML.

Patience - The Chat Bot Testing System

MCP server for SCF Controls Platform — security compliance controls, frameworks, evidence, and risk management for AI agents

Reference GCP Landing Zone for US financial-services workloads — banks, payment processors, fintechs. Covers SOC 2, PCI-DSS, NIST 800-53, SOX with multi-region foundation. FAST-compatible. Generated by Merlin Studio implements the Compiled AI paradigm: LLMs at build time, deterministic code at runtime.

A curated list of SOC 2 resources: readiness checklists, automation platforms, policy templates, audit firms, cloud security tools, and compliance guides for startups and enterprises

OWASP LLM Top 10 v2.0 implementations for financial services, insurance, and legal tech: n8n workflows, prompt library, and governance docs.

Multi-tenant AI SaaS platform for risk, culture, and communication management with LLM integration

Cloud Security Compliance Pipeline for AWS with automated multi-framework governance, Compliance-as-Code, Policy-as-Code and audit reporting using Python, Terraform, OPA/Rego and GitHub Actions.

Exa — independent third-party profile of a public API surface, by API Evangelist. Exa is a neural web search API designed for AI agents and applications. It combines a purpose-built web index with embedding-based retrieval to deliver highly relevant results across categories such as full web, news, companies, research, people, and financials.

Synthflow — independent third-party profile of a public API surface, by API Evangelist. Synthflow is an enterprise-ready no-code Voice AI platform for automating phone conversations at scale. The product combines a visual agent designer with in-house telephony, sub-100ms latency, and a 99.99% uptime guarantee, so businesses can build, deploy, and o

Drata — independent third-party profile of a public API surface, by API Evangelist. Drata is a continuous security and compliance automation platform supporting SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, and more, with policies, evidence, and trust center. Drata exposes a public REST API plus the SafeBase Trust API (acquired) and a Custom Connections

Carbide — independent third-party profile of a public API surface, by API Evangelist. Carbide (carbidesecure.com) is a compliance-automation and risk-management platform that pairs software with credentialed security advisors to help fast-growing organizations achieve and maintain security certifications and regulatory compliance.

Thoropass — independent third-party profile of a public API surface, by API Evangelist. Thoropass is an auditor-led, AI-powered compliance and audit automation platform that combines software with expert auditor services. Its products span continuous compliance monitoring and alerting, automated evidence collection, a global control library, vulner

SOC 2 Type I and Type II compliance checklist - Trust Services Criteria with control mapping and evidence collection guide

Operator surface for multi-tenant B2B SaaS isolation posture: blast-radius classification, RLS/dedicated-schema/shared-prefix mapping, cross-tenant data-access audit, lateral-movement risk. Browser-only, no telemetry. AGPL-3.0.

Tugboat Logic — independent third-party profile of a public API surface, by API Evangelist. Tugboat Logic is a security assurance and compliance automation platform acquired by OneTrust in 2021. It supports SOC 2, ISO 27001, HIPAA, GDPR, and NIST. As of 2024, the product has been rebranded under OneTrust's Certification Automation offering; legacy

An auditor-defensible NestJS + Postgres backend baseline: database-per-tenant isolation, RBAC, and controls mapped to HIPAA / PCI-DSS / SOC 2.

Runloop — independent third-party profile of a public API surface, by API Evangelist. Runloop is the AI Agent Accelerator — secure code sandboxes (Devboxes), evaluation infrastructure (Benchmarks, Scenarios), and production-grade orchestration for AI coding agents at enterprise scale.