UnitOne Compliance runs SOC 2 and EU CRA programmes, and collects runtime evidence from agents in your network. Security Remediation turns findings into reviewable PRs.
SOC 2 and EU CRA programmes. Article 14 reporting is free.
Intent-preserving Finding → Fix Spec → reviewable PRs.
01
SOC 2 or EU CRA, one per product.
02
Runtime evidence for agents comes from a gateway you deploy in your AWS, Azure, or GCP network, outbound HTTPS only.
03
Collect evidence per control, including vulnerability handling records (Annex I Part II) and runtime agent logs.
04
A SOC 2 draft on Free and a final exportable report on Team, plus the Article 14 24 hour early warning, 72 hour notification, and final report, which are free on every plan.
Reports are product outputs, not an audit opinion or certification.
UnitOne Compliance for SOC 2 and EU CRA. Article 14 reporting is free on every plan.
$0
1 product, 2 people, draft report, 1M tokens per month. No card.
Start free$99 per month
2 products, 5 people, final exportable report, 3M tokens per month.
Get TeamTalk to us
For more than 2 products.
Talk to usArticle 14 reporting clocks, CRA vulnerability handling, and intent-preserving remediation.
CRA Article 14 reporting clocks: 24 hour early warning, 72 hour notification, and the final report, plus the security evidence checklist manufacturers need.
Read the guide →What AppSec teams keep when CRA-style auditors ask how you handled a vulnerability: timestamps, runtime logs, user notices, and remediations that shipped as PRs.
Read the guide →How intent-preserving remediation turns a security finding into a constrained fix spec and a reviewable pull request without breaking developer intent.
Read the guide →What counts as a product, Article 14 reporting, and how that differs from vulnerability handling.
Enterprise plans, more than 2 products, contracts, or EU CRA and SOC 2 questions.