Show HN: Scorifya Controls, a self-hosted SoC 2 tool with RFC 3161 timestamps

Category: security

Tags: compliance, self-hosted, security, automation, audit

Score: 5.0/10 (Innovation: 4, Technical: 5, Documentation: 6, Utility: 6)

Scorifya Controls is a self-hosted compliance automation tool that runs 54 automated checks across AWS, GCP, Azure, and GitHub, mapped to SOC 2, PCI DSS, ISO 27001, HIPAA, and CMMC L1. It tracks manual controls, generates audit-ready reports, and uses RFC 3161 timestamps for verifiable attestations, targeting small SaaS teams that need a cost-effective alternative to SaaS compliance platforms.

Target audience: DevOps, security engineers, and compliance officers at seed-stage startups and small SaaS teams

Repository: https://www.scorifya.com/controls

View on Hacker News