Is your SaaS SOC 2 ready?
Paste your vulnerability findings as JSON and get a free SOC 2 gap analysis PDF. See which Trust Service Criteria are affected, severity breakdown, and what to fix first.
How it works
Step 01
Enter your email
We use your email to follow up about your report. You download the PDF in your browser once the analysis finishes. No account needed, no credit card required.
Step 02
Paste your scan data
Paste JSON output from the CVERiskPilot CLI, or a JSON array of findings with severity and CWE IDs. For other scanner formats, create a free workspace and upload the file.
Step 03
Get your gap analysis
We map your findings to SOC 2 Trust Service Criteria and generate a branded PDF report with severity breakdown and remediation priorities.
What your report includes
Trust Service Criteria Gap Matrix
Findings with a mapped CWE are tied to SOC 2 Trust Service Criteria in CC6 (Access), CC7 (Operations) and CC8 (Change Management). See exactly which criteria are affected.
Severity Breakdown by Control
Understand which criteria have critical vs. low-severity gaps. Prioritize remediation by actual risk to your SOC 2 posture.
Remediation Priority Matrix
Remediation steps ranked by the most severe finding affecting each criterion. Fix what matters most for your auditor first.
Auditor-Ready PDF Report
Download a branded PDF you can hand to your auditor or share with leadership. Executive summary, gap matrix, and action items included.
CWE-to-Control Mapping
Each CWE in our mapping is traced through NIST 800-53 to the corresponding SOC 2 criteria. Full traceability from finding to control.
Training evidence · SOC 2 CC1.4
Train on the vulnerabilities you actually have
Show your auditor that people were trained on the weaknesses found in your own systems. Findings recommend the training, and assignments and verified completions export as evidence for CC1.4.
Get your SOC 2 readiness report
Enter your email and paste your scan data below. We'll map findings with a mapped CWE to SOC 2 Trust Service Criteria and generate a downloadable PDF.
Ready to track remediation and close gaps?
The free report shows you where you stand. A free Starter workspace adds AI triage, case tracking, POAM export and per-framework posture scores; Audit Readiness raises AI triage to 1,000 calls a month and adds AI chat and unlimited uploads.
100% Veteran Owned · 14-day Audit Readiness trial