TrawlSec

TrawlSec is a compliance tool that turns continuous threat-intelligence monitoring into the audit trail an auditor asks for. Its maker presented it on Hacker News on 29 September 2026, and the site marks it as running in beta. It monitors threat-intelligence feeds and advisories and matches each finding to the assets a company actually runs. A reviewer then marks each finding as confirmed, ignored or a false positive, with the time and reasoning recorded; when a review period is closed it is locked as the record, and each period becomes an exportable report. TrawlSec maps that report to the evidence requested under SOC 2 criteria CC7.2 and CC7.3, ISO 27001 control A.5.7 and NIS2 Article 21(2)(e) on vulnerability handling. It is aimed at smaller companies preparing for these audits without a dedicated threat-intelligence team.

Not yet independently verified: The launch date rests on the maker’s own Show HN post of 29 September 2026; the site marks the service as a beta. It names no operating company or location beyond an email address, and no independent report was found. We will update this when it can be confirmed, and remove this note.