This maps your cluster’s posture to framework controls as evidence for your own program. It is not an audit or certification — of your environment or of ChangeGuard AI, which does not hold SOC 2, ISO 27001 or FedRAMP certification today. See Testing and assurance.
Supported Frameworks
Evidence Sources
- Network policies → segmentation controls
- RBAC configuration → access control
- KubeBench → configuration hardening
- Grype CVE scans → vulnerability management
- Falco alerts → monitoring and intrusion detection
- Syft SBOMs → supply chain controls
- Audit trail → change management