Make SOC 2 preparation a routine your team can manage.
Bring control ownership, evidence deadlines and follow-up into one working plan. Start with a free gap review, use editable tools yourself, or choose scoped setup help.
Get the free SOC 2 checklistExplore the $149 pack
How ready are you for SOC 2?
Answer 12 yes/no questions in about five minutes and see which next step fits. Free, no sign-up.
For SaaS startups, growing companies and GRC teams preparing for an independent SOC 2 examination.
Choose your starting point
Free · Find the gaps
A two-page PDF with six readiness-check sections covering scope, policies, technical controls, people, operations and evidence.
$149 · Organize the work
An 80-control workbook, six n8n workflows, a bonus GitHub evidence workflow and two PDF guides. Configure the files and connections yourself.
$950 · Starter Setup
Includes the pack, scope and owner configuration, workflows 01–05, recorded test results, handover and 14 days of post-go-live email support.
Need more help? Full Setup is $2,950 one-time. Managed Compliance Ops is $750/month with a three-month minimum and up to six hours/month; extra hours are $150/hour. Both are available on request. Third-party costs are separate. Compare current tiers and terms
Move from a list of controls to an owned process
- Define the boundary. Identify the services, systems and criteria to discuss with your CPA firm.
- Assign responsibility. Tailor controls, owners, evidence expectations and review dates.
- Build repeatable follow-up. Configure reminders, policy and vendor reviews, escalations and access-review kickoffs.
- Check the gaps. Review outstanding work and evidence quality with the people responsible.
What the pack helps you manage
- Control ownership and evidence scheduling, supported by an Evidence Log and TSC dashboard.
- Policy review dates, vendor assurance-report age and access-review schedules.
- Importable workflow files with placeholder credentials, plus a fictional-data demonstration workbook.
The pack is an editable starting point, not an auditor-approved control set. Workflow imports require configuration, testing and maintenance. The demo is included in the paid pack; no public interactive preview is promised.
Read about Cyhornet’s practitioner background · Ask a question about fit
Frequently asked questions
Will these resources produce a SOC 2 report?
No. An independent CPA firm examines controls and issues the report. Cyhornet supplies preparation tools and scoped setup support, not certification.
How do Type I and Type II differ?
Type I addresses control design at a specified date. Type II also examines operating effectiveness over a defined period. Agree your reporting needs and scope with your CPA firm.
Do we need a hosted compliance platform?
The workbook runs in compatible spreadsheet software. Automation requires your own n8n instance, credentials and connected tools. Cyhornet does not host n8n for clients.
Does Starter activate every supplied workflow?
No. Starter configures workflows 01–05. The joiner/mover/leaver workflow, GitHub evidence workflow, Jira access-review integration and additional API checks are part of the separately scoped Full Setup, not Starter.
Are other frameworks fully mapped?
No. The pack maps controls to the 2017 SOC 2 Trust Services Criteria. Its additional-framework columns are reserved placeholders, not completed crosswalks.
Are policies, remediation and ongoing monitoring included?
A policy tracker is included, not a newly written policy library. Full policy writing, technical remediation, third-party subscriptions, 24/7 monitoring, incident response and penetration testing are excluded from setup unless separately scoped where available.
Can consultants reuse the pack for multiple clients?
The pack is licensed for one organization. Its listing calls for one licence per client; do not assume redistribution or white-label rights.
When will we be ready for an examination?
Timing depends on your scope, gaps, existing controls and the CPA firm’s requirements. A setup delivery window is not an audit-readiness deadline.
Start with the next practical step.
Review your gaps for freeCompare setup support
Templates and readiness support only. Not legal advice, an audit or an attestation. No compliance or report outcome is guaranteed. Your organization remains responsible for control decisions, implementation and evidence.