Kertos is the European compliance partner for companies that need to get certified and stay continuously compliant under European law. Its platform brings information security, data protection, and AI management into one system, covering ISO 27001, ISO 42001, ISO 27701, GDPR, NIS2, the EU AI Act, SOC 2, TISAX, and C5.

Aikido covers all technical vulnerability management requirements when you're in the process for SOC2 or ISO 27001. Aikido reports findings and severity scores, Kertos adds that compliance context as audit evidence, mapping to ISO 27001 requirements for vulnerability management, secure development, and security testing.

Controls covered

The auto-checks map to ISO 27001 controls A.8.8 (Management of technical vulnerabilities), A.8.25 (Secure development life cycle), and A.8.29 (Security testing in development and acceptance). The same evidence supports continuous monitoring requirements for SOC 2.

The Aikido integration is included for Kertos customers on plans that cover integrations.