G2

Tim B.

CEO

Small-Business (50 or fewer emp.)

8/24/2026

"Keldyn: Compliance that runs inside the codebase, not next to it"

5/5

What do you like best about Keldyn?

The MCP server, without question. It plugs into Claude Code - the environment I already build in - so I can ask which SOC 2 controls my codebase satisfies and what still needs work, and the answer comes back in the same window as the code. Keldyn never takes a copy of it. The first time I ran it, it went through the whole codebase, told me what was missing, and pushed the lot into Jira as tickets. It did a serious amount of my work for me.<br><br>What makes that credible is the scoping underneath it. Keldyn's lead, Tom built the system description around the commitments we actually make to our merchants rather than a template, and the risk register came off our real architecture - 13 scenarios, each sized for a two-person company. Nothing got implemented that the business didn't need, which matters a lot when there's no GRC lead to absorb the overhead.<br><br>The result is that compliance shows up as work rather than as a report. I was able to wire up Keldyn's MCP along with Jira so that findings are filed under a dedicated epic and get prioritized alongside product. When I refactored the platform for protocol changes, I reran the assessment and confirmed in minutes that nothing had regressed. Review collected by and hosted on G2.com.

What do you dislike about Keldyn?

We haven't sat for the audit yet, so this is a review of the readiness process, not the outcome. It also assumes you're comfortable in a dev environment - if your compliance owner isn't technical, someone on the engineering side will need to drive the MCP piece. Review collected by and hosted on G2.com.

What problems is Keldyn solving and how is that benefiting you?

We handle identity data at scale and sell to companies whose procurement teams ask for a SOC 2 report before they ask about anything else. No Head of Security, no GRC lead, no DPO - I build the platform largely on my own, much of it with a coding agent. Everyone I know who's done SOC 2 after the fact describes months of hunting down evidence for decisions nobody wrote down at the time. I wanted to avoid that. Review collected by and hosted on G2.com.