Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.




Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.

CSAI FoundationChaptersEventsBlog
Take this survey on AI-driven code security, vulnerability management, and autonomous remediation to help shape industry research →

STAR Registry Listing for

Aggregate

Aggregate

Hosted Aggregate (app.aggregate.finance): a read-only finance MCP server. It connects banks and cards (through Plaid), Stripe, Shopify, Square, QuickBooks, Xero, BILL, payroll and more, reconciles them into one ledger, and gives the customer's AI assistant accurate cash, burn, runway, revenue and books.

Read-only at every provider; it can't move money. Per-AI scoped access, a customer-visible activity log, and one-click revoke. Data stays in the US (Fly.io; Neon on AWS us-east-1). The same code is open source (AGPL-3.0) for self-hosting.

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Information about Aggregate
Listed Since: 11/02/2026

STAR Level 1

Cloud Controls Matrix

CAIQ Self-assessment v4.1.0

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).

Created or renewed about 2 hours ago, on November 03, 2026.