SecurityLite
AuditPack

Turn audit evidence into control coverage.

Paste your policies, procedures and configuration exports. AuditPack is AI-powered to map each one to ISO 27001:2022 and SOC 2 controls, then tells you exactly what is missing.

Download for Windows See sample output

Windows installer, about 21 MB. No Python needed.

Illustration: evidence in, controls outISO 27001:2022 Annex A themes

Evidence in. Coverage out. Gaps named.

Mapped.Gapped.Packaged.
93ISO 27001:2022 controls
2frameworks, ISO and SOC 2
3coverage levels per control
ISO 27001:2022SOC 2Access controlIncident responseBackup & recovery Supplier managementLogging & monitoringCryptographyBusiness continuityJSON export
How it works

Weeks of mapping, in three steps.

Audit prep is slow because someone has to read every document against hundreds of controls. AuditPack does that first pass for you, the same way every time.

01

Add evidence

Name it, then paste the text: policy wording, procedure steps, config output, log excerpts, or a plain-English description of a screenshot.

02

Pick frameworks

ISO 27001:2022, SOC 2 Trust Services Criteria, or both in one pass.

03

Read the result

Results stream in live: summary and risk level, a control grid, gap call-outs and prioritised recommendations.

Sample output

Every control gets a verdict and a reason.

Illustrative layout. Real results depend on the evidence you provide.

A.5.15
Access controlThe policy defines roles, approval and review of access rights.
Full
A.8.13
Information backupBackup schedule is covered, but no restore-test result was provided.
Partial
A.5.19
Supplier relationshipsNo vendor due-diligence checklist in the evidence. Add one to close this.
Insufficient
What you get

From one document to a full package.

Control mapping

Each artifact is checked against the full control library, 93 ISO 27001:2022 controls and the SOC 2 criteria, so none are skipped.

Gap analysis

Partially covered controls come with a gap call-out and the extra evidence that would close it.

Audit-ready package

Save artifacts to a library, then generate one consolidated report with an overall risk level. Export it as JSON for your auditor or GRC platform.

Re-run any time

Re-analyse a policy when it changes, so compliance is checked continuously and not only at audit time.

Who it's for

Audit-ready without the consulting bill.

SMEs and start-ups

Build a credible evidence package without a full-time compliance analyst, and see your weak controls before you pay for a formal audit. The explanations double as team training.

No consultant for the mapping phaseFewer audit surprises

Enterprise GRC teams

Every artifact is evaluated against the same complete library every time, freeing analysts for judgement instead of mapping. Export structured JSON to your GRC platform.

Consistent coverageContinuous re-checks
What to paste

Any text-based evidence works.

Access controlPolicy excerpts, RBAC matrix, MFA settings
Incident responseIR procedure, log template, SLA table
Backup & recoveryBackup policy, RTO/RPO, test results
Vulnerability mgmtPatch procedure, scan schedule, SLAs
Supplier managementAssessment template, due-diligence list
Logging & monitoringSIEM description, retention, alert rules
CryptographyEncryption standard, key management
Business continuityBCP summary, test schedule, RTOs
Download

AuditPack for Windows.

Windows 10 / 11
Installer, about 21 MB. No Python needed. Download
  1. Run AuditPack-Setup-1.0.0.exe.
  2. Add your first piece of evidence and choose Analyze. A few free analyses are included, with no key needed.
  3. After the free trial, add your own API key in Settings. It is stored encrypted on your machine.

The installer is not code-signed, so Windows SmartScreen shows a warning on first run. Choose More info, then Run anyway.

Privacy and limits

Know where your evidence goes.

  • Sent to an AI serviceThe text you analyse is sent to a third-party cloud AI service. During the free trial it passes through a small relay that keeps only usage counts. Do not paste anything you may not share with a cloud AI service.
  • No key inside the appThe app contains no AI key. If you add your own after the trial, it is stored encrypted on your machine. No account with us, no tracking cookies on this site.
  • Assists, not certifiesAuditPack supports evidence mapping. It does not replace a qualified auditor or guarantee certification.
FAQ

Good to know.

What does it cost to run?

A few analyses are free, with no key needed. After that, add your own API key and usage is billed per analysis by the AI provider to your own account, so cost depends on how much evidence you analyse. There is no subscription on this page.

Can I upload PDFs or screenshots?

Not yet. Evidence must be text. Convert PDFs to text, or describe a screenshot in plain English.

How good are the mappings?

They are only as good as the detail you provide. Vague input gives vague mappings, so include specifics such as thresholds, owners and review dates.

Is there a Mac or Linux version?

The installer is Windows only. The app can also be run from source with Python 3.10 or later.

Can I hand the result to my auditor?

Yes. Export the consolidated report as structured JSON. The auditor still makes the final call.