Production-grade NestJS boilerplate for regulated industries. Features JWT RS256 with rotation, DB-driven RBAC, Drizzle ORM, and append-only Audit Logging. Security-first architecture for Fintech and Healthtech.

Open-source SOC 2 evidence puller for AWS. Pulls CloudTrail, IAM, GuardDuty, Security Hub, Config into a dated CSV bundle. Part of the AuditReady toolkit (vanta alternative, drata alternative).

Open source CLI to check your AWS SOC 2 readiness in minutes

SOC 2 · ISO 27001 · HIPAA compliance at $49/month — evidence stays on your machine. Electron desktop app or self-hosted Docker. Scheduled auto-scanning. Free tier available.

SOC 2 Type I and Type II compliance checklist - Trust Services Criteria with control mapping and evidence collection guide

A DevSecOps DevSecOps data pipeline that utilizes SHA-256 cryptographic hashing to mathematically verify document provenance and prevent RAG data poisoning before vectorization

Build secure NestJS APIs using Drizzle ORM for type-safe database access with integrated CI/CD and test coverage.