soc2-compliance

Endpoint evidence for SOC 2, ISO 27001, HIPAA & GDPR. Collect locally on Windows, macOS & Linux. Self-host or sync to a centralized dashboard. Free tier.

A stateless, zero-latency reverse proxy for real-time PII redaction in LLM streams.

Production-grade NestJS boilerplate for regulated industries. Features JWT RS256 with rotation, DB-driven RBAC, Drizzle ORM, and append-only Audit Logging. Security-first architecture for Fintech and Healthtech.

Zero-trust API firewall and security integrity layer for autonomous AI agents & Model Context Protocol (MCP) tool execution. Secure, TOCTOU-proof, fail-closed.

Open-source SOC 2 evidence puller for AWS. Pulls CloudTrail, IAM, GuardDuty, Security Hub, Config into a dated CSV bundle. Part of the AuditReady toolkit (vanta alternative, drata alternative).

Enterprise AI Security Gateway & Zero-Leakage Data Governance Proxy for LLMs. Developed by Samitha Tharanga Wijesinghe (ST Imagix).

A DevSecOps DevSecOps data pipeline that utilizes SHA-256 cryptographic hashing to mathematically verify document provenance and prevent RAG data poisoning before vectorization

SOC 2 Type I and Type II compliance checklist - Trust Services Criteria with control mapping and evidence collection guide

Open-source AI agent security gate: deterministic ALLOW/BLOCK/ESCALATE authorization before every tool call, plain-English policy compilation, tamper-evident audit ledger. MCP security gateway + Claude Code/Cursor guardrails. Rust, Apache-2.0.

Automated SIEM log parser, privilege escalation extractor, and SOC 2 Type II audit logging engine for high-throughput enterprise log streams.

Build secure NestJS APIs using Drizzle ORM for type-safe database access with integrated CI/CD and test coverage.