Purpose
Gather evidence, perform testing, and create audit reports in ~25 lines of code per tool.
Use cases:
- Vendor Due Diligence: Evaluate your vendors actual security posture (transparent and timely reports allows you to truly evaluate risk).
- Audits: Automatically collect and upload high quality evidence directly to your auditor (no screenshots required).
What this library does:
- Evidence Collection: Gathers evidence (JSON files) directly from your vendor's API or SDK.
- Testing: Logic based configuration tests (encryption, MFA, key rotation, etc) against your cloud environment.
- Report Building: Builds JSON & PDF reports that summarize findings from each test & tool.
- Upload: Share full audit packages (evidence & audit reports) with auditors, customers, and regulators.
Philosophy:
- Lightweight: You can setup this library in minutes, and it doesn't require intensive integrations with your cloud providers. This eliminates vendor lock-in and gives you control over how your data is processed.
- Repeatability: Clear instructions explain how evidence was gathered and describes the test procedures that were performed. Share your AuditOps report + supporting evidence, and kindly ask your auditor to re-perform the work that was already done.
- Anti-Checkbox: We all know that compliance has become a check-box exercise. We hope you'll use this library to fight against it and start holding everyone to higher standard.
1 maintainer
Metadata
1 maintainer
Release files for auditops 0.1.3
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| auditops-0.1.3.tar.gz | 219.1 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| auditops-0.1.3-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 460.1 kB
Release files / auditops-0.1.3.tar.gz
| Download URL | auditops-0.1.3.tar.gz |
|---|---|
| Size | 219.1 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
8eb46f3e4c368a9232fe3f0690b5700e0b8b7b424f29fa68de606741159ec1dd
|
|
BLAKE2b-256 checksum How to use checksums |
1b31e451640973f987e28008bb036d4a9a79fb147f8f421be9d0a739949d78e0
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.1
|
Release files / auditops-0.1.3-py3-none-any.whl
| Download URL | auditops-0.1.3-py3-none-any.whl |
|---|---|
| Size | 241.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
d2476360481d600786273a074399fde5943747b381dfab2819d6104fec69cfa3
|
|
BLAKE2b-256 checksum How to use checksums |
7f837c2bc6afcda8b49bbf5413a580deb453d4c489b8275caccb2666fb87f241
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.1
|
Security for auditops 0.1.3
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
