Purpose
Gather evidence, perform testing, and create audit reports in ~25 lines of code per tool.
Use cases:
- Vendor Due Diligence: Evaluate your vendors actual security posture (transparent and timely reports allows you to truly evaluate risk).
- Audits: Automatically collect and upload high quality evidence directly to your auditor (no screenshots required).
What this library does:
- Evidence Collection: Gathers evidence (JSON files) directly from your vendor's API or SDK.
- Testing: Logic based configuration tests (encryption, MFA, key rotation, etc) against your cloud environment.
- Report Building: Builds JSON & PDF reports that summarize findings from each test & tool.
- Upload: Share full audit packages (evidence & audit reports) with auditors, customers, and regulators.
Philosophy:
- Lightweight: You can setup this library in minutes, and it doesn't require intensive integrations with your cloud providers. This eliminates vendor lock-in and gives you control over how your data is processed.
- Repeatability: Clear instructions explain how evidence was gathered and describes the test procedures that were performed. Share your AuditOps report + supporting evidence, and kindly ask your auditor to re-perform the work that was already done.
- Anti-Checkbox: We all know that compliance has become a check-box exercise. We hope you'll use this library to fight against it and start holding everyone to higher standard.
1 maintainer
Metadata
1 maintainer
Release files for auditops 0.1.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| auditops-0.1.2.tar.gz | 219.1 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| auditops-0.1.2-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 460.1 kB
Release files / auditops-0.1.2.tar.gz
| Download URL | auditops-0.1.2.tar.gz |
|---|---|
| Size | 219.1 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
27ce024a44f02db7ee8f83aa185165d8ef909282a2227194b9fe65232410b452
|
|
BLAKE2b-256 checksum How to use checksums |
74aebfc58545e77de4e8c3630a4ac60a9a642ea050f49fd55395004d4f584a26
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.1
|
Release files / auditops-0.1.2-py3-none-any.whl
| Download URL | auditops-0.1.2-py3-none-any.whl |
|---|---|
| Size | 241.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
3a05270d836bf75157b1249a40fe51c95d0921a52f67b91cf4d6506fcbb1baa0
|
|
BLAKE2b-256 checksum How to use checksums |
8526a127c9235264dd88e478b96608f49a3f9a5ce115667966e1e5f723f737cb
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.1
|
Security for auditops 0.1.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
