Evidence-Bound Assurance & Developer Security

Deterministic static analysis for AI systems. Scans source code for security risks with evidence generation. Distinct from AI AppSec — this is the SaaS platform scanner.

• Deterministic rule-based scanning
• Evidence generation with provenance
• SARIF output for CI/CD integration
• Dashboard integration

Automated discovery of AI systems in your codebase, cloud infrastructure, and SaaS tools. GitHub integration, dependency scanning, and risk classification.

• GitHub repository scanning
• Dependency analysis
• Risk classification
• Automated discovery

Map what your AI systems and agents can reach, what controls apply, and what the evidence establishes. Sample map available for public viewing.

• Reachability mapping
• Control overlay
• Evidence-bound claims
• Five evidence planes

Generate cryptographically hashed trust artifacts, evidence packages, and verification receipts. Public verification URLs let auditors confirm what the evidence establishes.

• SHA-256 hashed evidence
• Public verification URLs
• Decision receipts
• Evidence package integrity

The Master Control Plane coordinates static scanning, runtime testing, compliance wizards, and regulatory checks into a single provenance-tracked audit run. SHA-256 hash-chained event logs and tamper-evident records.

• Multi-engine unified audit runs
• SHA-256 hash-chained event log
• CI/CD webhook integration
• Tamper detection

Reconstruct your recorded compliance state and supporting evidence at a point in time. Versioned state snapshots, jurisdiction-specific rule execution, regression detection, and tamper-evident evidence bundles.

• Drift detection & regression reports
• Root cause analysis
• Custom rule pack builder
• Tamper-evident evidence bundles

See your SOC 2, ISO 27001, and NIST readiness directly in pull requests. No noise, no CVE spam. Install from GitHub Marketplace.

• Single readiness score per PR
• Exact blocking controls shown
• Maps to SOC 2, ISO, NIST
• Scans changed files via GitHub API

Add 3 lines of code, get EU AI Act-ready documentation. Automatic compliance logging with cryptographic verification for every AI decision. Python SDK with tamper-evident audit trails.

• Cryptographic verification
• Immutable audit logs
• EU AI Act evidence support
• Python SDK integration

Track AI API usage automatically with SDK wrappers. Drop-in replacement for OpenAI and Anthropic SDKs with low overhead. Cost tracking, compliance evidence, and usage analytics.

• @haiec/openai SDK
• @haiec/anthropic SDK
• Automatic cost calculation
• Compliance evidence trail

Integrate scoped execution guards at supported application or gateway boundaries. Use authorized stop/recovery requests and inspect available evidence; control effectiveness depends on actual customer wiring.

• Scoped operator intervention
• Configurable threshold signals
• Event and receipt evidence where available
• TypeScript/JavaScript SDK

Behavioral and runtime monitoring that supports CSM6 Function 3 (Risk, Evaluation & Monitoring), with evidence relevant to Functions 2, 4, and 6. The scanner does not independently implement the full CSM6 framework.

• Behavioral fingerprinting
• Drift detection alerts
• Evidence for selected CSM6 functions
• Deterministic engines

Generate detailed explanations for AI decisions with bias analysis, compliance checks, and audit trails. Human-readable explanations, counterfactuals, and recommendations.

• Decision factor analysis
• Bias detection integration
• Counterfactual explanations
• Audit trail generation

Interactive questionnaires for SOC 2, GDPR, HIPAA, ISO 27001, ISO 42001, NIST AI RMF, EU AI Act, NYC LL144, Colorado AI Act, and more. Framework mapping is not certification.

• Supported framework mappings
• Gap analysis & recommendations
• Readiness scoring
• Evidence upload support

Free enforcement readiness check for NYC LL144 and Colorado AI Act. Instant gap analysis with specific regulatory clause references and remediation steps.

• NYC LL144 + Colorado AI Act coverage
• Specific regulatory clause references
• Remediation steps
• No signup required