Imagine preparing for a security audit with hundreds of screenshots, policies, and configuration files. An auditor must manually interpret this evidence, map it to security controls, identify gaps, and document findings. That process takes time and can be inconsistent.

I built EvidenceLens AI, an AI-assisted evidence analysis tool designed to make this workflow faster and more structured.

The auditor uploads evidence and selects an ISO 27001 control. The AI analyses the available information, identifies what appears to be supported, highlights potential security gaps, estimates risk, and recommends remediation. The findings can then be exported as a CSV or audit report.

For example, in my demonstration, the system identifies that administrator MFA is enforced but standard-user MFA is not, highlighting a potential security gap.

The important part is that EvidenceLens AI does not replace the auditor. It helps the auditor focus on the gaps that need attention, while human validation remains essential for final decisions.

Our goal is simple: reduce repetitive evidence analysis so security professionals can spend more time on meaningful risk decisions.