Supports your evidence
SOC 2
Built to support your SOC 2 evidence
Detection and incident records for your security monitoring controls.
Compliance
Evidence for the frameworks you report on.
SOCGenX records what your detections and analysts did, so the evidence your auditors ask for already exists. Your auditor still decides whether a control is met.
Frameworks
One evidence trail, mapped to each framework.
Each card shows how SOCGenX evidence maps to that framework.
Supports your evidence
ISO 27001
Built to support your ISO 27001 evidence
Logging, monitoring and incident evidence for your Annex A controls.
Supports your evidence
DORA
Built to support your DORA evidence
Incident timelines and detection records for your ICT incident reporting.
Supports your evidence
NIS2
Built to support your NIS2 evidence
Incident handling records and detection coverage for your reporting duties.
Supports your evidence
UK Cyber Essentials
Built to support your UK Cyber Essentials evidence
Records that show your monitoring is switched on and working.
Supports your evidence
HIPAA
Built to support your HIPAA evidence
Audit records of who reviewed which security event and when it was decided.
Supports your evidence
PCI DSS 4.0
Built to support your PCI DSS 4.0 evidence
Log review and alert response records for your cardholder data environment.
Supports your evidence
NIST CSF 2.0
Built to support your NIST CSF 2.0 evidence
Detect and respond evidence mapped to the framework functions.
Supports your evidence
MITRE ATT&CK
Maps to MITRE ATT&CK
Each detection tagged with the techniques it is meant to catch.
Supports your evidence
GDPR / UK GDPR
Built to support your GDPR / UK GDPR evidence
Incident records that help you assess and report personal data breaches.
How it works
Evidence as a by-product of the work.
Recorded as it happens
Each verdict, approval and rule test is written to the Evidence Ledger.
Mapped to controls
Evidence is tagged to the framework controls you choose.
Ready to export
Your team exports the trail for the period an auditor asks about.
SOCGenX does not grant a certificate or an attestation. It gives your auditor a clear, replayable evidence trail.
FAQ
Evidence questions.
How does SOCGenX help with DORA and NIS2 incident reporting?
DORA and NIS2 both expect you to detect, classify and report significant incidents on a deadline. SOCGenX records when each alert was raised, what the agents found, and who approved each action and when, so the incident timeline your report needs is already in the evidence ledger. It is built to support your reporting evidence; it does not file reports for you.
What evidence does SOCGenX produce for a SOC 2 audit?
A replayable record of security monitoring: which log sources and detections were checked, which alerts were investigated, the verdict and evidence behind each one, and the approval for every response. You map that record to the controls your auditor tests.
Bring your next audit questions.
We show you the evidence trail SOCGenX would produce for the framework you report on.