SOC 2 evidence, direct from AWS. In minutes.
Evidence Tracer (EVT) is an AI agent that connects to your AWS account, automatically collects 1,000+ evidence items across 10 services, and generates an auditor-ready SOC 2 report in minutes.
No credit card. Read-only AWS access. Connect via AWS APIs.
Built with input from security professionals at:
Three steps. Five minutes.
No setup. No manual uploads. No guesswork.
Connect
Grant EVT a read-only IAM role in your AWS account. We can only see your settings. We never write, store, or touch your data.
Scan
EVT scans IAM, S3, CloudTrail, Config, EC2, CloudWatch, KMS, Lambda, RDS, and SNS. Every evidence item is timestamped and linked to a real AWS API call.
Report
You get an auditor-ready report with gap scores, freshness scores, and remediation steps. Everything maps to the 8 core SOC 2 controls.
See it run.
A real scan on a real AWS account.
0 items collected · 8 controls mapped · 2 gaps found
From AWS service to SOC 2 control.
Mapped automatically.
EVT scans your live AWS environment, collects evidence, and maps every finding to the correct SOC 2 control — in minutes.
Your infrastructure, hardened.
See exactly what EVT flags and fixes in your Terraform configs.
1resource "aws_iam_role" "app_role" {2 name = "app-service-role"34 # Overly permissive policy5 actions = ["*"]✗6 resources = ["*"]✗78 # No MFA enforcement9 mfa_required = false✗1011 # CloudTrail disabled12 enable_cloudtrail = false✗1314 # No key rotation15 enable_key_rotation = false✗16}
Transparent. Traceable. Timestamped.
Built for AWS-native teams who need real evidence, not generated text.
What makes EVT different
How existing tools fall short
Security professionals who validated the problem
Working product. Book a demo and see it run on your account.
Pilot price. Fraction of what legacy tools charge.
Evidence collection that takes engineering teams 40+ hours manually.
vs. 40+ hrs manually
Validated by CISOs, DevOps engineers, and security advisors at enterprise SaaS and fintech companies.
SOC 2 evidence that can't be traced to a real API call isn't evidence. Every item EVT collects is timestamped, sourced, and auditor-verifiable.
Pilots. Not enterprise contracts.
Work directly with us. No lock-in. No sales team. Just the tool and the results.
per pilot engagement
- Read-only AWS connection. 5-minute setup.
- Full scan across 10+ AWS services, 1,000+ evidence items
- SOC 2 Type 1 readiness report with gap scores
- Remediation guidance mapped to each gap
- Direct access to the founding team throughout
Problem Validation
What we kept hearing from security teams
From 10+ discovery conversations with CISOs, DevOps leads, and compliance engineers at AWS-native companies.
Every time we’ve gone through SOC 2, it’s been two engineers manually pulling configs for three weeks. There’s got to be a better way.
— Security Engineer, Series B SaaS (NDA)
The problem isn’t knowing what SOC 2 requires. It’s that collecting the actual evidence from AWS takes forever, and half of it is outdated by the time the auditor sees it.
— DevOps Lead, fintech startup (NDA)
We almost lost an enterprise deal because our SOC 2 evidence package wasn’t ready. The audit itself was fine — it was the two months of prep before it that nearly broke us.
— VP Engineering, pre-Series B SaaS (NDA)
These reflect real conversations. Names withheld at participants' request.
Common questions.
Your next enterprise deal is waiting on SOC 2.
Pilots are open. Book a 20-minute demo and see EVT on your AWS account.
No credit card · Read-only AWS access · Cancel anytime