Startup Shujinko unveils AuditX cloud compliance platform

By Robin Amlot

Seattle-based Shujinko is a pioneer in automated compliance preparation. AuditX from Shujinko is a SaaS platform that automates the enterprise cloud security compliance audit process to make it up to 3x faster and dramatically simpler. Organisations can use AuditX to speed audits (PCI DSS, SOC 2, ISO 27001, NIST, etc.) across public cloud infrastructure (AWS and Azure) and hybrid environments. Shujinko has also announced its Automated Evidence Collection Engine, a platform for automatically orchestrating, collecting and transforming compliance evidence directly from public cloud platforms and other SaaS systems.

“Compliance audits are painful, manual, time-consuming – and happen again and again, year after year,” said Scott Schwan, Shujinko CEO and co-founder. AuditX eliminates much of the work by translating complex standards requirements and controls into easily understandable tasks for teams, allowing them to spend less time on audits and more on top company growth priorities. AuditX automates evidence collection, maps evidence across multiple controls and across different standards, streamlines audit workflow and clarifies communication across teams and with auditors. AuditX organizes evidence in a centralised library for final readiness review and provides a 360-degree dashboard to make the entire process highly visible and predictable.

The Automated Evidence Collection Engine, provides organisations with automatic “push of a button” collection of evidence from AWS and Azure cloud infrastructure.

The engine allows organizations to rapidly gather technical evidence. Schwan said: “With our new Automated Evidence Collection engine, this entire process can use automation to collect, aggregate and organise evidence much more quickly and simply. It’s a huge win for organisations struggling through multiple audits, conflicting priorities and juggling limited resources.”

Shujinko’s Automated Evidence Collection architecture is designed to be extensible across services, clouds and regions; scalable to handle even massive compliance audits; and robust enough to seamlessly manage large, complex enterprise environments. The aim is to save thousands of valuable engineering and devops hours, freeing them up to work on top priorities that grow the business, instead of spending their time manually capturing hundreds of screenshots from complex cloud infrastructures to prepare for an audit. Additionally, by automating evidence collection, audit preparation scales and evolves in lock-step with rapidly evolving applications and underlying cloud infrastructure. Evidence can be collected at any point in time, simply by pressing a button, and the collection process is tamper-proof, stamped as ‘automated’.