Resources
UnitOne guides on SOC 2 and EU CRA evidence, security remediation, and agent and MCP security.
Compliance (SOC 2 and EU CRA)
A SOC 2 Request Is Different than a SOC 2 Report
What SOC 2 auditors ask for first, why Type II evidence can't be backfilled, and how to collect it while controls run. Start free, no card.
What vulnerability-handling evidence do CRA auditors expect?
CRA-style evidence: awareness time, runtime logs, user notices, and remediations shipped as PRs. Why scanner theater fails.
Does an SBOM satisfy CRA Article 14?
An SBOM is inventory. EU CRA Article 14 is a reporting duty for exploited vulnerabilities and severe incidents, plus AppSec evidence that still has to exist.
Security remediation
Finding to fix spec to PR
Turn a security finding into a constrained fix spec and a reviewable PR. Finding → Fix Spec → PR for code, agents, and MCP servers.
Intent-Preserving CVE Remediation vs. Naive Auto-Fix
Learn why naive CVE auto-fixes break application intent and how reviewable, context-aware remediation paths help teams fix vulnerabilities safely.
PE Portfolio Security Remediation Playbook
A practical playbook for PE operating teams to prioritize portfolio findings, increase fix capacity, and create repeatable remediation evidence.
Agent and MCP security
What is an AI / LLM gateway in your network?
An AI/LLM gateway inspects agent and model traffic on a path you operate. UnitOne blocks unsafe tool use, keeps CRA-style logs, then attributes spend.
Gateway vs MCP scanner — what does UnitOne Gateway do?
An MCP scanner grades a server before you connect it. UnitOne Gateway inspects tool calls at runtime, blocks unsafe actions, and keeps CRA-style logs.
How do I start a Gateway trial?
Start free on UnitOne Gateway: Free vs Team vs Enterprise, agents vs seats, and what you get after checkout. Remediation is a separate POC.
Agent discovery: find every agent and MCP in your estate
Discover every AI agent and MCP server in your estate, map who can call which tools, and make agent spend and tool calls governable with UnitOne Gateway.
Where does cost leak between agent discovery and publishing?
Where agent cost leaks between discovery, experiments, and publishing — and how Gateway attributes spend to agents, not seats.
Cap AI agent spend without blocking the teams that need agents
Cap AI agent spend by identity: attribute usage by agent/team, block unsafe tools, keep CRA-ready logs. Start free on UnitOne Gateway.
MCP Server Enterprise Readiness Checklist: Inventory Before Policy
Use this MCP server enterprise readiness checklist to inventory tools, owners, permissions, data access, and change risk before setting policy.
MCP server enterprise-ready security rubric
A security rubric for MCP servers: identity, least-privilege tools, secrets, untrusted input, logging, and change control before agents connect.