SOC 2 readiness
Everything the auditor asks management for, already written.
SOC 2 Readiness is a one-time Optics add-on that produces the half of an examination management writes, and the evidence behind it: a control register with an owner on every control, versioned policies, access reviews on a cadence, and thirteen months of runs you can export for any period.
It writes management's half
An examination has two halves. Management describes the system, asserts what it commits to, and lists the controls. Optics drafts all three from your own record and keeps every version.
It keeps the evidence long enough to test
A period runs three to twelve months. Monitor checks, scan runs, releases and incidents are held for thirteen, so the months somebody asks about still exist when they ask.
It shows a control operating, not merely present
Every control carries an owner, a cadence and the runs behind it. A check that should have happened and did not is itself a record, which is the thing an examiner goes looking for.
Walk into your audit with the evidence already done.
- Everything the auditor asks management for, drafted from your own record
- A control register mapped to the Trust Services Criteria, with an owner on every control
- A policy library of twelve templates, versioned, with acknowledgement tracked
- Access reviews on a cadence, and a record of who approved each one
- An evidence ledger that keeps thirteen months instead of thirty days
- Any period exported on demand, control by control
- A printable readiness package to hand your auditor on day one
- Twelve months of collection per purchase, renewed whenever you buy again
The auditor's reading list
A printable readiness package for any period: controls with owners, policies with acknowledgements, access reviews with approvers, and the evidence behind each one. You choose the auditor; they arrive to read rather than to discover.
Setup
Buy the add-on and the governance plane turns on for your organization. Nothing to install.
$999
Pay once and SOC 2 Readiness is unlocked for your whole organization, on top of a Pro or Team plan. Not a subscription, and never priced per run.
Security Suite: $1449
Pentest, Load Testing, DDoS Resilience and SOC 2 Readiness in one purchase. 17% off buying them separately, saving $297.
See the suiteIs this a SOC 2 report?
No, and nothing here pretends otherwise. An examination has two halves: what management describes, asserts and controls, and what an independent CPA firm tests and signs. Optics produces the first half and the evidence behind it. You choose the auditor, and they do the second half after reading what you hand them.
What does the add-on actually give me?
A control register mapped to the Trust Services Criteria with an owner on every control, a library of twelve policy templates that stay versioned with acknowledgements tracked, access reviews on a cadence with a record of who approved each one, an evidence ledger holding thirteen months, and a printable readiness package for any period you name.
How far back does the evidence go?
Thirteen months. Monitor checks, scan runs, releases, incidents and access reviews sit on that floor rather than being pruned at thirty days, so a period of three to twelve months is still there when somebody asks for it.
Why twelve months rather than one payment for good?
Because readiness is an annual obligation and collecting evidence has a running cost. The window runs twelve months from purchase and buying again extends it. In the Security Suite the three proof checks stay unlocked for good; only readiness runs on the clock.
Will this get us through the examination?
It removes the work you would otherwise pay for twice: the platform that collects evidence, and most of the preparation. The examination still happens, and it tends to be smaller because the auditor is reading an organised record rather than assembling one.
What do I hand the auditor?
One package, printed for the period they asked about: controls with owners and cadences, policies with versions and acknowledgements, access reviews with approvers, and the runs behind each claim. A control that should have operated and did not appears too, because leaving it out is what an examiner is looking for.
Is SOC 2 Readiness in a bundle?
Yes. The Security Suite bundles Pentest, Load Testing, DDoS Resilience and SOC 2 Readiness in one $1449 purchase: 17% off buying them separately, saving $297. One purchase unlocks every part of it for your whole organization.