TrawlSec

TrawlSec is compliance software that converts ongoing threat-intelligence monitoring into the audit trail auditors request. It is in beta, and its maker presented it on Hacker News on 29 September 2026. Its target is smaller firms getting ready for audits, and firms that lack a dedicated threat-intelligence team.

What TrawlSec offers

• Matched monitoring: threat-intelligence feeds and advisories are matched to the assets a company runs, so reviewers see relevant findings.
• Reviewer decisions: each finding is marked confirmed, ignored or false positive, with the time and reasoning recorded.
• Period sign-off: a review period is locked as the record once it is closed.
• Exportable reports: each period becomes a report that lines up with evidence requests for CC7.2 and CC7.3 under SOC 2, control A.5.7 under ISO 27001, and Article 21(2)(e) of NIS2, which covers vulnerability handling.

Clients

Smaller companies that need audit evidence but have no dedicated threat-intelligence team.

Key facts

• Status: beta
• Sources: the US National Vulnerability Database and ENISA's EU Vulnerability Database, plus any advisory or security news feed a team adds
• Launch: Show HN post on 29 September 2026