Soc2 Python Packages

evidentia-core

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

8K 4 1

evidentia-ai

7K 4 1

evidentia-collectors

7K 4 1

evidentia-api

6K 4 1

evidentia-integrations

6K 4 1

evidentia

6K 4 1

evidentia-mcp

5K 4 1

evidentia-eval

4K 4 1

prodcycle

Multi-framework policy-as-code compliance scanner for infrastructure and application code. Evaluates Terraform, Kubernetes, Docker, and source code against SOC 2, HIPAA, and NIST CSF.

4K 0 0

pii-shield-wasi

Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️

2K 160 10

mima-governance

Python SDK for AI governance — runtime attestation, GRC evidence, EU AI Act, ISO 42001, SOC 2

2K 0 0

aetherproof

Tamper-evident cryptographic receipts for AI outputs - offline-verifiable (SHA-256 + Ed25519). Supports EU AI Act Article 12 record-keeping. Prototype of Signet.

2K 6 1

ec2-security-scanner

AWS EC2 security scanner: 46 checks across 8 categories (IMDSv2, security groups, EBS encryption, public AMIs, IAM, patching), UserData secret detection, and compliance mapping for FSBP, CIS, PCI DSS, HIPAA, SOC 2, ISO 27001 and NIST.

1K 4 0

lambda-security-scanner

A comprehensive AWS Lambda security scanner with multi-framework compliance mapping

1K 2 0

controlbridge-ai

756 4 1

controlbridge

750 4 1

controlbridge-integrations

DEPRECATED: renamed to 'evidentia-integrations'. Transitional re-export shim; removed in v0.7.0.

720 4 1

controlbridge-collectors

719 4 1

controlbridge-core

712 4 1

leakproof

Local-first leak firewall for developers — see and redact exactly what your AI tools send to the cloud.

582 4 0

tribunal

Quality gates for AI-generated code -- TDD enforcement, secret scanning, and audit trails for coding agents.

473 0 0

ragcompliance

Audit trail middleware for RAG pipelines in regulated industries

461 1 0

ecs-eks-security-scanner

AWS ECS/EKS security scanner: 45 checks across 8 categories (privileged containers, secrets in task defs, public endpoints, control-plane logging, IAM), compliance mapping for 11 frameworks

454 1 0

closegate

The policy chokepoint for finance AI agents — umbrella install for closegate-policy, closegate-engine, and closegate-agent.

444 0 0