ConfigLedger

ConfigLedger is a web app (with lightweight desktop collectors) that continuously monitors configuration drift across cloud accounts and endpoints and turns it into audit-ready evidence. Instead of asking teams to upload screenshots and policy PDFs, it captures immutable “who/what/when” change records from sources like AWS CloudTrail, Azure Activity Logs, Google Cloud Audit Logs, and endpoint configuration baselines. It maps those changes to common controls (SOC 2, ISO 27001, HIPAA) and generates a living evidence timeline auditors can review. The product is intentionally narrow: configuration and change evidence, not a full GRC suite. It includes alerting for high-risk drift (e.g., public storage, disabled logging, weakened MFA) and a simple workflow to attach remediation notes and approvals. Expect some setup effort—compliance is messy—but once connected, it reduces the weekly evidence chase substantially.