Compliance reports

Payment Card Industry Data Security Standard. Required if you process, store, or transmit cardholder data. Our scan maps to PCI DSS 4.0 requirements for web application security.

Checks mapped: SSL/TLS strength, security headers, injection prevention, access controls, secret management

EU privacy evidence mapping for consent, policy disclosures, trackers, public legal surfaces, and bounded accessibility basics. Results are technical observations, not a legal opinion or compliance certification.

Checks mapped: Cookie consent, privacy-policy controller/contact/retention/rights, third-party trackers, same-origin Terms availability, and explicit unavailable/needs-auth states

Service Organization Control 2. Focuses on security, availability, processing integrity, confidentiality, and privacy. Our report maps scan findings to SOC 2 Trust Services Criteria.

Checks mapped: Access controls, encryption, monitoring, vulnerability management, incident response

Health Insurance Portability and Accountability Act. Required for handling Protected Health Information (PHI). Our report covers technical safeguards and access controls.

Checks mapped: Encryption at rest/transit, access controls, audit logging, authentication strength

International standard for information security management systems (ISMS). Our report maps findings to Annex A controls covering physical, organizational, and technical security.

Checks mapped: Access management, cryptography, operations security, communications security