Purpose
Gather evidence, perform testing, and create audit reports in ~25 lines of code per tool.
Use cases:
- Vendor Due Diligence: Evaluate your vendors actual security posture (transparent and timely reports allows you to truly evaluate risk).
- Audits: Automatically collect and upload high quality evidence directly to your auditor (no screenshots required).
What this library does:
- Evidence Collection: Gathers evidence (JSON files) directly from your vendor's API or SDK.
- Testing: Logic based configuration tests (encryption, MFA, key rotation, etc) against your cloud environment.
- Report Building: Builds JSON & PDF reports that summarize findings from each test & tool.
- Upload: Share full audit packages (evidence & audit reports) with auditors, customers, and regulators.
Philosophy:
- Lightweight: You can setup this library in minutes, and it doesn't require intensive integrations with your cloud providers. This eliminates vendor lock-in and gives you control over how your data is processed.
- Repeatability: Clear instructions explain how evidence was gathered and describes the test procedures that were performed. Share your AuditOps report + supporting evidence, and kindly ask your auditor to re-perform the work that was already done.
- Anti-Checkbox: We all know that compliance has become a check-box exercise. We hope you'll use this library to fight against it and start holding everyone to higher standard.
1 maintainer
Metadata
1 maintainer
Release files for auditops 0.1.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| auditops-0.1.1.tar.gz | 29.7 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| auditops-0.1.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 82.4 kB
Release files / auditops-0.1.1.tar.gz
| Download URL | auditops-0.1.1.tar.gz |
|---|---|
| Size | 29.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
9a23765fa18c0b3e9fc308bf376ff2e00b970414c62a607fd4ad391ccacf0c2e
|
|
BLAKE2b-256 checksum How to use checksums |
139bfa4569cdbf00b323c412fc8557b9a5fc4983e3e798fd41a2c872103f559a
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.1
|
Release files / auditops-0.1.1-py3-none-any.whl
| Download URL | auditops-0.1.1-py3-none-any.whl |
|---|---|
| Size | 52.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
c6b52dfa8620e8d817245add041a982ee85b4e94e3a4407a2cf872b02f2ac332
|
|
BLAKE2b-256 checksum How to use checksums |
ab9efdf123d17e4c591274b8948c94bd92bcf7cd98cfdb6bc7a5e5842869404a
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.1
|
Security for auditops 0.1.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
