Featured Solution

Audit & Compliance

Your SOC 2 auditor will ask about AI tooling. Do you have the evidence?

SOC 2

ready audit trail

OWASP

MCP Top 10 mapped

JSONL

immutable finding log

Featured Solution

Every finding has a timestamp and a chain of custody.

AISS writes an immutable JSONL audit log on every scan. Every entry includes checker ID, evidence string, file path, severity, confidence, remediation, and timestamp. Your auditor can verify any finding.

Immutable JSONL at research/audit.jsonl

Checker ID + evidence + file path + timestamp per finding

SOC 2 Type II ready from day one

OWASP MCP Top 10 coverage mapped to checker IDs

How it works

Scan runs, log written

Every scan writes a timestamped JSONL entry per finding: checker ID, evidence, file path, severity, confidence, remediation.

Rug pull alerts on changes

CHK-124 hashes tool descriptions on every scan. Any change fires an alert with a full diff.

Policy decisions logged

Every allowlist decision, severity override, and ignore rule is logged with timestamp and reviewer.

Export evidence package

Download audit log, SBOM, finding list, and policy snapshot. Formatted for SOC 2 evidence without manual assembly.

Press coverage

VentureBeat

Anthropic Skill scanners passed every check. The malicious code rode in on a test file.

VentureBeat

No publicly documented scanner operates outside the assumption that the threat lives in SKILL.md.

CrowdStrike · RSAC 2026

ClawHavoc — 1,184 malicious skills confirmed in the wild. The attack surface is the skill layer.