Purpose
Gather evidence, perform testing, and create audit reports in ~25 lines of code per tool.
Use cases:
- Vendor Due Diligence: Evaluate your vendors actual security posture (transparent and timely reports allows you to truly evaluate risk).
- Audits: Automatically collect and upload high quality evidence directly to your auditor (no screenshots required).
What this library does:
- Evidence Collection: Gathers evidence (JSON files) directly from your vendor's API or SDK.
- Testing: Logic based configuration tests (encryption, MFA, key rotation, etc) against your cloud environment.
- Report Building: Builds JSON & PDF reports that summarize findings from each test & tool.
- Upload: Share full audit packages (evidence & audit reports) with auditors, customers, and regulators.
Philosophy:
- Lightweight: You can setup this library in minutes, and it doesn't require intensive integrations with your cloud providers. This eliminates vendor lock-in and gives you control over how your data is processed.
- Repeatability: Clear instructions explain how evidence was gathered and describes the test procedures that were performed. Share your AuditOps report + supporting evidence, and kindly ask your auditor to re-perform the work that was already done.
- Anti-Checkbox: We all know that compliance has become a check-box exercise. We hope you'll use this library to fight against it and start holding everyone to higher standard.
1 maintainer
Metadata
1 maintainer
Release files for auditops 0.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| auditops-0.1.0.tar.gz | 29.7 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| auditops-0.1.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 82.4 kB
Release files / auditops-0.1.0.tar.gz
| Download URL | auditops-0.1.0.tar.gz |
|---|---|
| Size | 29.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
ed5498dc21b094cc1237b3026e6283c1504cf2ad0f52d0e633f97d5052161e8e
|
|
BLAKE2b-256 checksum How to use checksums |
3d8481e84103a28a5e3fddc7a377f76d439a3f3d76660b1be03a516370d563a8
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.1
|
Release files / auditops-0.1.0-py3-none-any.whl
| Download URL | auditops-0.1.0-py3-none-any.whl |
|---|---|
| Size | 52.7 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
d03b18a602809d05558304e330c36060fd35485a6d77242b7eaa9046d79cf776
|
|
BLAKE2b-256 checksum How to use checksums |
8fa3301b77818aa7e85278bb61cc4017ce3ce328b011d62fb0db4a93fac6f282
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.1
|
Security for auditops 0.1.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
