One scan. Evidence for every framework you care about.

Security Monitor maps its 170+ external checks to clause-level requirements in ISO 27001, NIS2, NEN 7510, SOC 2, GDPR, DORA and more — so you stop chasing screenshots and start handing auditors dated evidence.

Frameworks covered

Pick your framework

Global

ISO 27001:2022

Annex A controls auto-evidenced from the public attack surface.

9 controls evidenced

NIS2 Directive

Article 21 cybersecurity measures + Article 23 incident reporting.

8 controls evidenced

Netherlands

NEN 7510

Information security in Dutch healthcare — technische maatregelen.

8 controls evidenced

Global

SOC 2 (Trust Services Criteria)

Continuous evidence for CC6 (logical access) and CC7 (system operations).

8 controls evidenced

GDPR

Article 32 security of processing + Article 33 breach notification.

8 controls evidenced

DORA

Digital Operational Resilience Act for financial entities.

8 controls evidenced

Global

PCI DSS 4.0

External requirements for any business handling cardholder data.

8 controls evidenced

Global

CIS Controls v8

The vendor-neutral baseline of 18 critical security controls.

8 controls evidenced

United States

HIPAA Security Rule

Technical safeguards for US-regulated electronic protected health information.

9 controls evidenced

United Kingdom

Cyber Essentials

UK government-backed baseline — required for many UK contracts.

8 controls evidenced

Coverage matrix

One check, many frameworks

Every external check we run produces evidence for multiple frameworks. Add a domain once and you cover the technical controls across all of them.

Security Monitor check	ISO 27001	NIS2	NEN 7510	SOC 2	GDPR	DORA	PCI DSS 4.0	CIS Controls v8	HIPAA Security Rule	Cyber Essentials
Encrypted transport (TLS 1.2+)	A.8.24	Art	10.1	CC6.7	Art	Art	Req	CIS	§164.312(e)(1)	Control
Email authentication (SPF / DKIM / DMARC)	A.5.14	Art	13.2	CC6.6	Art	Art	Req	CIS	§164.308(a)(5)(ii)(B)	Control
Secure HTTP response headers	A.8.23	Art	13.1	CC6.6	Art	Art	Req	CIS	§164.312(a)(1)	Control
DNS hygiene & DNSSEC	A.8.20	Art	13.1.2	CC7.1	Art	Art	Req	CIS	§164.312(c)(1)	Control
Reputation & threat intelligence	A.5.7	Art	12.6	CC7.2	Art	Art	Req	CIS	§164.308(a)(8)	Control
Credential exposure monitoring	A.5.34	Art	16.1	CC7.3	Art	Art	Req	CIS	§164.308(a)(6)	Supplementary
Exposed files & admin panels	A.5.10	Art	9.4	CC6.1	Art	Art	Req	CIS	§164.308(a)(1)(ii)(A)	Control
Third-party data flow map (subdomains & external services)	A.5.9	Art	8.1	CC3.2	Art	Art	Req	CIS	§164.308(b)(1)	Scope

See your compliance readiness in 60 seconds

Free scan. Instant evidence for every framework on this page. Share the report with your auditor.

ISO 27001Aligned

SOC 2 Type IIControls

GDPRCompliant

AES-256Encryption