AuditDrift

AuditDrift is a web app (with optional lightweight desktop agent) that continuously checks whether your audit evidence is still valid. Instead of scrambling before SOC 2/ISO 27001 audits, it monitors “evidence drift” across cloud configs, IAM, endpoint posture, and key policies, then flags when controls no longer match what you last attested. It auto-builds an audit-ready evidence timeline: config snapshots, change logs, approvals, and links to source-of-truth systems. The product focuses on being brutally practical: fewer dashboards, more concrete auditor artifacts (who changed what, when, and why). It integrates with common stacks (AWS/GCP/Azure, Okta, GitHub, Jira, Google Workspace) and produces exportable evidence packets mapped to control frameworks. It’s an AI + traditional app: AI helps classify changes, map them to controls, and draft auditor-friendly narratives, but the core value is deterministic evidence collection and change tracking.

← Back to idea list