Trust Center

Live compliance posture powered by S.H.I.E.L.D. automated scanning

SOC 2 Trust Service Criteria

Evidence collection mapped to all five criteria

◆
Security
Protection against unauthorized access through firewall rules, encryption, and intrusion detection.
◆
Availability
Systems operational and accessible as committed, with redundancy and monitoring in place.
◆
Processing Integrity
Data processing is complete, valid, accurate, timely, and authorized.
◆
Confidentiality
Information designated as confidential is protected through encryption and access controls.
◆
Privacy
Personal information is collected, used, retained, disclosed, and disposed of in conformity with commitments.

Our ethical AI governance is led by the C.R.E.E.D. Institute

AI Governance Score: A+

Learn About C.R.E.E.D.

Live Compliance Scores

Continuously verified by S.H.I.E.L.D. automated scanning engine

DISA STIG
Hardened
94%
Compliance Score

108 security rules continuously verified across Ubuntu 22.04, Docker, and network services.

HIPAA Security Rule
Compliant
91%
Compliance Score

30 rules covering access control, audit logging, integrity verification, and transmission security per §164.312.

SOC 2
Controls Implemented
88%
Evidence Collected

Continuous evidence collection for SOC 2 Type II trust service criteria. Automated audit trail generation.

Ubuntu 22.04 STIG
96%
51 rules · SSH, passwords, audit, kernel
Docker STIG
93%
30 rules · Daemon, isolation, images
Network STIG
89%
27 rules · Firewall, TLS, DNS, ports
CIS Ubuntu
92%
40 rules · Benchmarks, hardening

What We Monitor

✓
SSH Hardening
13 security controls including key-based auth, protocol restrictions
✓
Kernel Security
8 sysctl parameters for ASLR, ICMP, source routing
✓
Password Policies
Complexity requirements, history enforcement, lockout rules
✓
Docker Container Isolation
Resource limits, namespace separation, image security
✓
UFW Firewall Management
Active firewall rules, default-deny policy, port allowlisting
✓
TLS/SSL Certificate Monitoring
Expiration tracking, protocol version enforcement
✓
Audit Logging & Event Tracking
Comprehensive system and application audit trail
✓
Access Control & RBAC
Role-based permissions, least-privilege enforcement
✓
Network Security
Port scanning, intrusion detection, DNS security
✓
File Integrity & Permissions
Critical file monitoring, permission validation

Automated Scanning

Our compliance engine runs continuously, verifying security controls and collecting evidence without manual intervention.

6h
Scan Interval
178
Rules Checked
5
Frameworks
24/7
Monitoring

One-click remediation for security findings · Evidence auto-collected for SOC 2 auditors · STIG Viewer .ckl export

Framework Details

DISA STIG — Ubuntu 22.04
51 Rules

Covers SSH configuration, password policies, audit logging, kernel hardening, file permissions, and service management. Based on the Defense Information Systems Agency Security Technical Implementation Guide.

DISA STIG — Docker
30 Rules

Covers Docker daemon configuration, container isolation policies, image security scanning, resource limits, and centralized logging. Ensures containers run with minimal attack surface.

DISA STIG — Network
27 Rules

Covers firewall rules, port exposure, TLS configuration, DNS security, and network protocol hardening. Validates defense-in-depth network architecture.

HIPAA Security Rule (§164.312)
30 Rules

Covers access control mechanisms, audit controls, data integrity verification, person or entity authentication, and transmission security. Aligned with the HIPAA Security Rule technical safeguards.

CIS Benchmark — Ubuntu
40 Rules

Center for Internet Security benchmark covering filesystem configuration, software updates, process hardening, network configuration, logging, and access/authentication settings.

AI Governance

V.I.G.I.L. — Ethics & Governance

All AI operations are governed by V.I.G.I.L. (Vigilant Intelligence for Governance, Integrity & Liability), our autonomous ethics officer. Every decision is logged, auditable, and transparent through our C.R.E.E.D. ethics framework.

Questions About Our Security?

We’re happy to discuss our compliance controls, provide additional documentation, or answer any security questionnaires.

security@kytranempowerment.com
Get In Touch View Services
Last verified: April 7, 2026