Thanks to visit codestin.com
Credit goes to github.com

Skip to content
@TrazTech-Inc

TrazTech Inc.

Security and compliance for startups, led by a published security researcher. SOC 2, penetration testing, AI/LLM security, and fractional CISO.
README.md

TrazTech

Security and compliance consultancy based in Toronto, Canada. Founded by Jacob Masse - published security researcher with 5 CVEs including CVE-2024-45163 (CVSS 9.1).

What We Do

We help startups and growing companies get audit-ready and stay secure. Our services include:

  • Compliance - SOC 2, ISO 27001, ISO 42001, HIPAA, PCI DSS, GDPR, PIPEDA
  • Security - Penetration testing, cloud security, AI/LLM security
  • Fractional CISO - Part-time security leadership for teams that need it

Results to date: Zero exceptions on SOC 2 Type II. 76 controls implemented. 75 days from kickoff to audit-ready. $11K saved on audit quotes.

Open-Source

Repository Description
awesome-soc2 Curated list of SOC 2 resources - 250+ entries
startup-security-policies 15 security policy templates with SOC 2 + ISO 27001 mappings
cloud-security-audit-scripts AWS/GCP/Azure pre-audit security assessment scripts (4,700+ lines)
awesome-compliance-automation Curated list of compliance automation tools across all frameworks
vendor-risk-assessment-toolkit Vendor risk assessment framework with templates, scoring, and automation

Learn More

Visit traztech.ca or read the blog.

Popular repositories Loading

  1. cloud-security-audit-scripts cloud-security-audit-scripts Public

    Python scripts for pre-audit cloud security evidence collection across AWS, GCP, and Azure. SOC 2 and ISO 27001 control mappings. Read-only, open-source

    Python 1

  2. awesome-soc2 awesome-soc2 Public

    A curated list of SOC 2 resources: readiness checklists, automation platforms, policy templates, audit firms, cloud security tools, and compliance guides for startups and enterprises

  3. startup-security-policies startup-security-policies Public

    15 open-source security policy templates for SOC 2 and ISO 27001 audits. Ready-to-use with framework control mappings. Includes AI acceptable use and privacy policies

  4. awesome-compliance-automation awesome-compliance-automation Public

    270+ compliance automation tools: GRC platforms, access review, vendor risk, CSPM, endpoint, trust centers. SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NIST CSF

  5. vendor-risk-assessment-toolkit vendor-risk-assessment-toolkit Public

    Vendor risk assessment toolkit: 70-question security questionnaire, scoring framework, Python tracker, templates. Maps to SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR

    Python

  6. .github .github Public

    TrazTech organization profile

Repositories

Showing 7 of 7 repositories

People

This organization has no public members. You must be a member to see who’s a part of this organization.

Top languages

Loading…

Most used topics

Loading…