Which compliance frameworks can SuperClue scan?
SuperClue has 14 framework scans, covering Indian frameworks (CERT-In, SEBI, RBI, IRDAI, DPDP, telecom) and global standards (PCI DSS, ISO 27001, HIPAA, SOC 2, NIST CSF, NIS2, EU CRA, EU DORA). Each scan checks what is visible on your public website and asks for evidence where a control can only be confirmed internally. It helps you assess your position. It is not a certification or an audit.
The 14 framework scans
| Framework | Modules | Default credits per module |
|---|---|---|
| CERT-In | 18 | 0.25 |
| SEBI CSCRF | 22 | 0.30 |
| RBI Cyber Security | 12 | 0.30 |
| IRDAI | 10 | 0.25 |
| DPDP Act | 11 | 0.25 |
| Telecom (DoT) | 10 | 0.25 |
| PCI DSS v4.0.1 | 14 | 0.35 |
| ISO 27001:2022 | 12 | 0.30 |
| HIPAA | 12 | 0.30 |
| SOC 2 Type II | 13 | 0.35 |
| NIST CSF 2.0 | 13 | 0.30 |
| NIS2 | 12 | 0.30 |
| EU Cyber Resilience Act | 7 | 0.30 |
| EU DORA | 5 | 0.30 |
A full scan costs the module count times the rate. For example, all 18 CERT-In modules at 0.25 come to 4.5 credits. Prices shown are defaults. The detailed check lists are on the CERT-In checks and SEBI CSCRF checks pages.
What does a framework scan actually check?
Each module runs external checks against the URL you give it, such as the TLS certificate, HTTP security headers, cookie flags, DNS records, exposed files and admin paths, error pages, and public pages like the privacy policy and security.txt. The results are mapped to the framework's controls.
Many controls (board policies, log retention, backups, staff training) cannot be seen from outside. For those, the module says so and asks for internal evidence.
What do the module statuses mean?
- Completed: the module ran its external checks and recorded results.
- Not applicable: there was nothing for the module to assess on this target.
- Requires access: the control needs internal evidence or access that an external scan does not have.
What a framework scan is not
A scan does not certify you, and SuperClue is not a regulator or an empanelled auditor. Use the results to find gaps and prepare evidence before a formal audit.
Compare frameworks and find gaps
The comparison view takes the latest completed scan for each framework on the same target, shows a score for each, and lists the frameworks with gaps or no scan yet. A comparison costs 5 credits. Exporting a compliance report as PDF costs 3 credits.
Can I define my own framework?
Yes. You can create a custom framework, list its controls, and map each control to scanner modules. SuperClue then assesses each control from the modules your scans have already run. Controls with no mapped results are marked not assessed. See compliance docs for details.
Framework scans are paid per module in credits.
See pricing