LoxeAI

The product is a SOC 2 readiness scanner that collects evidence from 25+ AWS services and maps findings to 12 SOC 2 controls to produce an auditor-ready report, addressing the problem of preparing for a first SOC 2 audit. It sells to B2B startups and small teams pursuing their first SOC 2, including founders, engineering and security staff responsible for compliance. It is delivered as SaaS with a free tier via a read-only CloudFormation stack and STS AssumeRole, returning SHA-256 verified results in 2-3 minutes.

Key features

• SOC 2 readiness scan for AWS
• Maps 25+ AWS services to 12 SOC 2 controls
• Read-only CloudFormation stack deployment
• STS AssumeRole with ExternalId binding
• SHA-256 hashed verifiable evidence
• Evidence Tracer with API endpoint and timestamp
• Custom controls from plain English requirements
• Gideon compliance co-pilot for remediation
• Interactive readiness report for auditors
• Open-source scan verification
• Rate limited to 5 scans per day