Skip to content
@TrazTech-Inc

TrazTech Inc.

Security and compliance for startups, led by a published security researcher. SOC 2, penetration testing, AI/LLM security, and fractional CISO.

TrazTech

Security and compliance consultancy based in Toronto, Canada. Founded by Jacob Masse - published security researcher with 5 CVEs including CVE-2024-45163 (CVSS 9.1).

What We Do

We help startups and growing companies get audit-ready and stay secure. Our services include:

  • Compliance - SOC 2, ISO 27001, ISO 42001, HIPAA, PCI DSS, GDPR, PIPEDA
  • Security - Penetration testing, cloud security, AI/LLM security
  • Fractional CISO - Part-time security leadership for teams that need it

Results to date: Zero exceptions on SOC 2 Type II. 76 controls implemented. 75 days from kickoff to audit-ready. $11K saved on audit quotes.

Open-Source

Repository Description
awesome-soc2 Curated list of SOC 2 resources - 216 entries
startup-security-policies 13 security policy templates with SOC 2 + ISO 27001 mappings
cloud-security-audit-scripts AWS/GCP/Azure pre-audit security assessment scripts (5,300+ lines)
awesome-compliance-automation Curated list of compliance automation tools across all frameworks
vendor-risk-assessment-toolkit Vendor risk assessment framework with templates, scoring, and automation

Free Tools

Learn More

Visit traztech.ca or read the blog.

Popular repositories Loading

  1. awesome-soc2 awesome-soc2 Public

    A curated list of SOC 2 resources: readiness checklists, automation platforms, policy templates, audit firms, cloud security tools, and compliance guides for startups and enterprises

  2. startup-security-policies startup-security-policies Public

    15 open-source security policy templates for SOC 2 and ISO 27001 audits. Ready-to-use with framework control mappings. Includes AI acceptable use and privacy policies

  3. cloud-security-audit-scripts cloud-security-audit-scripts Public

    Python scripts for pre-audit cloud security evidence collection across AWS, GCP, and Azure. SOC 2 and ISO 27001 control mappings. Read-only, open-source

    Python

  4. awesome-compliance-automation awesome-compliance-automation Public

    270+ compliance automation tools: GRC platforms, access review, vendor risk, CSPM, endpoint, trust centers. SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NIST CSF

  5. vendor-risk-assessment-toolkit vendor-risk-assessment-toolkit Public

    Vendor risk assessment toolkit: 70-question security questionnaire, scoring framework, Python tracker, templates. Maps to SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR

    Python

  6. .github .github Public

    TrazTech organization profile

Repositories

Showing 6 of 6 repositories
  • vendor-risk-assessment-toolkit Public

    Vendor risk assessment toolkit: 70-question security questionnaire, scoring framework, Python tracker, templates. Maps to SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR

    TrazTech-Inc/vendor-risk-assessment-toolkit's past year of commit activity
    Python 0 MIT 0 0 0 Updated Sep 9, 2026
  • awesome-compliance-automation Public

    270+ compliance automation tools: GRC platforms, access review, vendor risk, CSPM, endpoint, trust centers. SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NIST CSF

    TrazTech-Inc/awesome-compliance-automation's past year of commit activity
    0 CC0-1.0 0 0 0 Updated Sep 10, 2026
  • cloud-security-audit-scripts Public

    Python scripts for pre-audit cloud security evidence collection across AWS, GCP, and Azure. SOC 2 and ISO 27001 control mappings. Read-only, open-source

    TrazTech-Inc/cloud-security-audit-scripts's past year of commit activity
    Python 0 Apache-2.0 0 0 0 Updated Sep 9, 2026
  • startup-security-policies Public

    15 open-source security policy templates for SOC 2 and ISO 27001 audits. Ready-to-use with framework control mappings. Includes AI acceptable use and privacy policies

    TrazTech-Inc/startup-security-policies's past year of commit activity
    0 MIT 0 0 0 Updated Sep 9, 2026
  • awesome-soc2 Public

    A curated list of SOC 2 resources: readiness checklists, automation platforms, policy templates, audit firms, cloud security tools, and compliance guides for startups and enterprises

    TrazTech-Inc/awesome-soc2's past year of commit activity
    0 CC0-1.0 0 0 0 Updated Sep 9, 2026
  • .github Public

    TrazTech organization profile

    TrazTech-Inc/.github's past year of commit activity
    0 0 0 0 Updated Sep 9, 2026

People

This organization has no public members. You must be a member to see who’s a part of this organization.

Top languages

Python