VulnPilot — Audit evidence packs

VulnPilot generates audit evidence packs mapped to specific security framework controls. The output is a Markdown file you can convert to PDF and hand to your auditor.

Supported frameworks

• SOC 2 CC7.1 — Monitors for the occurrence of anomalous activity; evaluates detected anomalies to determine if they represent security events.
• ISO 27001 Annex A 8.8 — Management of technical vulnerabilities.

Generate an evidence pack

vulnpilot analyze scan.csv --evidence soc2
vulnpilot analyze scan.csv --evidence iso27001

The output file is named evidence_<fw>_<date>.md by default. Use --evidence-out FILE to specify a custom path.

What the pack includes

• Scan metadata — timestamped, with source file reference
• Documented prioritization methodology (KEV / EPSS / CVSS weights)
• Prioritized findings table with KEV flags
• Framework control mapping statement
• Management review and sign-off block
• SLA compliance and exception register summary (when run via vulnpilot verify)

Including verification and governance

For the most complete evidence pack — including SLA compliance data and exception register — run evidence generation via vulnpilot verify:

vulnpilot verify new_scan.csv --exceptions exceptions.csv --evidence soc2