CortiX ComplyKit

CMMC and SOC 2 readiness with AWS evidence from your read-only role, gap reports, policy templates and drafted system security plan statements. A readiness tool, never an assessment or a certification.

What it does

CortiX ComplyKit supports CMMC and SOC 2 readiness with AWS evidence, gap reports, policy templates and drafted system security plan statements. It is a readiness tool, never an assessment or a certification.

Programs: CMMC Level 1 (15 FAR 52.204-21 requirements), CMMC Level 2 (110 NIST SP 800-171 Rev. 2 requirements) or SOC 2 readiness.

Requirements: status, owner, due date, notes and evidence files set by your team.

AWS signals: through your read-only role, Security Hub NIST 800-171 findings, Config rules out of compliance, IAM Access Analyzer findings and account checks (root MFA, password policy, CloudTrail, EBS encryption, GuardDuty). Signals never set a status; the gap report flags a requirement marked met while a check fails.

Prowler: import your own Prowler scan output.

Documents: gap report (Excel, Word, Markdown), system security plan (Word, Markdown), policy templates and an evidence index CSV.

Not included: SPRS score, AWS Audit Manager assessments, other clouds and POA&M closeout.

AWS charges: ComplyKit reads your account through a read-only role you create. AWS services you run in your account, such as Security Hub and Config, are billed by AWS separately from this AWS Marketplace subscription and you pay those charges.

Highlights

CMMC Level 1, CMMC Level 2 and SOC 2 readiness programs with owners, due dates and evidence files.
AWS signals from your read-only role flag any requirement marked met while a check fails.
Gap report, system security plan, policy templates and an evidence index; never an assessment or certification.