Bundle · 2 kits

Two kits for one moment: a buyer is reviewing your security.

An enterprise buyer is reviewing your security, and your engineers ship with coding agents. The AI Startup Security Bundle is the Coding Agent SOC 2 Kit and the AI Startup Security Questionnaire Kit together. Your agent sets up both.

Get both kits $39 · both kits See what's in it

Bought separately the minimums add up to $48. One license covers one organization. 7-day refund.

What's in it

For the auditor

The Coding Agent SOC 2 Kit

Managed policy files for Claude Code and Codex, a control map to the Trust Services Criteria, an MCP server register, per-machine evidence capture, starter SIEM rules, a one-page governance policy, a gaps page and a check script.

Read about the SOC 2 kit

For the buyer

The AI Startup Security Questionnaire Kit

Your agent interviews you once and writes an answer bank for 120 security questions in 10 themes, 29 of them on AI and LLM use. Every answer has a status, evidence and an owner, and every gap is written down instead of hidden.

Read about the questionnaire kit

SOC 2 kit minimum: $29
Questionnaire kit minimum: $19
Bought separately: $48
The bundle: $39

Your agent sets up both

Unzip each kit, open Claude Code or Codex in the folder and say: read the README and set this up.

The agent asks its questions, shows you a plan and waits for your yes. Both kits write files only. Neither deploys anything, and neither fills in a buyer's questionnaire for you.

Linux is tested with Claude Code. Codex, macOS and Windows are in beta. The kits make no network calls.

What it is not

Not an audit, not a pen test, and not a promise about an audit outcome or a deal.

The SOC 2 mappings are the author's reading of the 2017 Trust Services Criteria. Confirm them with your auditor.

Only need one? Each kit is sold on its own: the SOC 2 kit and the questionnaire kit.

Built by Jared Smith

13+ years shipping production systems. I was CISO at Lavender, where I built the security program from zero through SOC 2 Type II and shipped production AI features for 100,000+ users. Before that: backend and identity at BlockFi, telemetry ingestion at AAMP Global, and co-founder of PopSocial.

Today I'm a founding engineer at an early-stage startup, where most of the code is typed by coding agents and every line is mine to answer for. The kits grow from two posts: Claude Code and SOC 2 and Why Auto-Filled Security Questionnaires Kill AI Deals.

Questions

What do I get in the download?

Two zips, one per kit. Each is Markdown steps, templates and shell scripts. No app, no account, no API keys.

Who is the bundle for?

Founders and security leads at AI startups whose engineers use Claude Code or Codex and whose buyers send security questionnaires.

How much do I save?

The bundle is $39 for both kits. Bought separately, the minimums add up to $48 ($29 for the SOC 2 kit and $19 for the questionnaire kit).

Can I use it for a client?

One license covers one organization. Don't resell or redistribute the kits, and don't hand the kit files themselves to a client. The files the kits write from your answers are yours.

Refunds?

7 days, no questions. Email jared@sublimecoding.com.

Get both kits

Two zips, one per kit, delivered via Gumroad. No app, no account, no API keys.

Get both kits $39 · both kits

7-day refund, no questions.