caiq

LangGraph agent that auto-answers vendor security questionnaires (CAIQ, SIG, Excel) from a knowledge base with citations + confidence scores. Reviewers see only the yellow-highlighted rows that need human attention.

Programmatic schema and validator for the CSA CAIQ-Lite vendor security questionnaire. Author, validate, and diff CAIQ responses as code.

A curated list of resources for the answerer's side of security questionnaires — frameworks, response tools, trust centers, templates, and guides for teams that receive a SIG/CAIQ and must answer it.

Open-source security questionnaire & RFP auto-responder. Drafts answers grounded in your own security profile and flags gaps instead of inventing certifications. BYOK with the Anthropic Claude API - no data stored server-side.

Parse SIG/CAIQ/VSA/VSAQ security questionnaires into structured JSON — ingest + framework detection only. No answers, no auto-fill.

Custom RCSA by Technoscope is an enterprise GRC platform for IT and security teams. It evaluates controls against standards like NIST and ISO, automates risk calculations, uses AI for threat forecasting, and generates board-ready compliance reports to streamline end-to-end risk management.

Turn a vendor security questionnaire spreadsheet into a first-pass draft, citing your own security docs for every answer and never inventing a control you do not have.

Five-agent team that answers vendor security questionnaires (CAIQ, SIG, custom Excel) from your actual documentation — cited, audited for overclaims, never fabricated.