Live service health, uptime metrics, and incident history.
99.97%
30-day uptime
< 120 ms
Avg response time
0
Incidents (30d)
API
Backend REST API and authentication services
App
Web application and dashboard
Integration Sync
AWS, GitHub, Slack and other connector pipelines
Evidence Collection
Automated evidence gathering and control checks
CDN / Asset Delivery
Static assets, reports, and document downloads
Email Notifications
Alert and notification delivery
90 days agoToday
Elevated API latency
Sep 18, 2026
14:32 UTC · Investigating
Identified increased database connection pool exhaustion causing P99 latency spikes. Scaled read replicas to mitigate.
15:01 UTC · Monitoring
Additional read replicas provisioned. Latency returning to normal levels.
15:47 UTC · Resolved
All metrics nominal. Root cause identified as missing index on evidence query. Patch deployed.
GitHub integration sync delays
Aug 4, 2026
09:14 UTC · Investigating
GitHub API rate limiting affecting scheduled sync jobs. Manual sync available as workaround.
10:22 UTC · Monitoring
Implemented exponential backoff and queue prioritisation. Backlog clearing.
11:05 UTC · Resolved
All GitHub sync jobs completed. Rate limit handling improved.
SecureSpect was built by engineers who have been through SOC 2 audits the hard way — spreadsheets, screenshots, last-minute evidence chases, and auditor email threads at midnight.
We believe SOC 2 compliance shouldn't be a seasonal scramble. Engineering teams build reliable, secure systems every day — the compliance layer should reflect that reality automatically, not require a parallel manual effort.
SecureSpect makes that possible by continuously evaluating technical controls across your entire stack, collecting evidence automatically, and giving you a single, auditor-ready view of your posture — every day, not just before an audit.
SecureSpect is a full SOC 2 GRC platform — 12 compliance modules covering CC1 through CC9. We connect to your infrastructure via read-only, least-privilege integrations and run 100+ automated checks against the SOC 2 Trust Services Criteria. Beyond technical controls, SecureSpect manages risks, incidents, change requests, vendor assessments, employee security, pen tests, and more. Evidence is collected, versioned, and checksummed automatically.
We run SecureSpect on SecureSpect. Our own infrastructure is continuously monitored against the same controls we offer to customers. We are a small, product-focused team. We respond to every support, feedback, and sales email — usually the same business day.
SecureSpect automates evidence collection and technical control monitoring. It does not issue SOC 2 certifications, does not guarantee compliance, and is not a substitute for a qualified auditor. SOC 2 compliance also requires organizational policies, procedures, and independent auditor judgment that are outside the scope of any software product.
We collect only what we need to operate the service, we do not sell your data, and we give you control over what we hold.
When you sign up, we collect your name, work email address, and organization name.
SecureSpect reads metadata from your connected integrations (cloud infrastructure, identity providers, code repositories, and communication tools) via read-only, least-privilege access. We collect only the minimum data required to evaluate each SOC 2 control. We do not read your code, application data, customer records, or any data stored in your services.
We collect standard application logs including which features you use, page visits, and error events. This data is used to improve the product and diagnose issues.
We do not use your data to train machine learning models. We do not sell your data to third parties.
All customer data is isolated at the database level using Postgres Row-Level Security policies. No organization can access another organization's data.
Evidence and control test results are retained for the duration of your subscription plus 90 days after account closure, after which they are deleted.
You may request a copy of your data, request deletion, or request correction by emailing support@securespect.com. We will respond within 30 days.
The marketing website uses only essential cookies required for session management. We do not use advertising trackers or third-party analytics cookies on this page.
Questions about this policy: support@securespect.com
By using SecureSpect, you agree to these terms. The key points: we provide a compliance monitoring tool, not a certification service; you own your data; and we can terminate accounts that misuse the service.
SecureSpect provides a software platform for continuous SOC 2 compliance monitoring, automated evidence collection, and control testing.
SecureSpect is not a SOC 2 certification body. Use of SecureSpect does not constitute, guarantee, or imply SOC 2 certification or compliance.
You must provide accurate information when creating an account. You are responsible for maintaining the confidentiality of your credentials.
You may use SecureSpect only for lawful purposes. You agree not to:
You retain ownership of all data you provide to SecureSpect. We do not claim ownership of your data and will not use it for any purpose beyond operating SecureSpect for your organization.
Paid plans are billed in advance on a monthly or annual basis. You may cancel at any time; cancellation takes effect at the end of the current billing period.
To the maximum extent permitted by law, SecureSpect's liability for any claim is limited to the amount you paid us in the 12 months preceding the claim.
Legal questions: support@securespect.com
We hold ourselves to the same standard we help you demonstrate. SecureSpect runs its own checks on its own infrastructure — and we're transparent about how we've built it.
SecureSpect runs on AWS. All production systems run in a dedicated AWS account with strict IAM boundary policies, VPC isolation, and no public-facing management interfaces.
All data in transit is encrypted using TLS 1.2 or higher. All data at rest — including compliance evidence, integration credentials, and audit logs — is encrypted using AES-256. Integration credentials are encrypted at the application layer before storage and are never exposed to the frontend.
Every API endpoint enforces role-based access control (RBAC) server-side. Tenant isolation is enforced at the database layer via Postgres Row-Level Security policies.
SecureSpect connects to customer AWS accounts via cross-account IAM roles. We provide the exact IAM policy for customer review before connection. We never request, store, or accept AWS access keys.
If you discover a security vulnerability, please report it to support@securespect.com with "Security Disclosure" in the subject line.
SecureSpect monitors its own production infrastructure using the same 100+ controls it offers to customers. Customers may request a copy of our current self-assessment report by emailing support@securespect.com.
Whether it's a missing control, a UX frustration, a feature request, or a compliment — we want to hear it.
Prefer email? Send directly to feedback@securespect.com