AuditTrailr

AuditTrailr is a web app (with optional desktop agent) that turns SOAR automation into defensible evidence for audits and incident postmortems. It ingests execution logs from common SOAR platforms and security tools, then normalizes them into a tamper-evident timeline: who/what triggered an action, what data was used, what approvals happened, and what changed in downstream systems. The MVP focuses on the unglamorous but painful gap between “we automated it” and “we can prove it worked safely.” It generates auditor-ready reports mapped to frameworks (SOC 2, ISO 27001) and internal controls, and flags missing approvals, risky playbook steps, and broken evidence chains. This is not a full SOAR replacement; it’s an evidence and governance layer that reduces audit fire drills and makes incident response reviews faster and less political.