Purpose
Gather evidence, perform testing, and create audit reports in ~25 lines of code per tool.
Use cases:
- Vendor Due Diligence: Evaluate your vendors actual security posture (transparent and timely reports allows you to truly evaluate risk).
- Audits: Automatically collect and upload high quality evidence directly to your auditor (no screenshots required).
What this library does:
- Evidence Collection: Gathers evidence (JSON files) directly from your vendor's API or SDK.
- Testing: Logic based configuration tests (encryption, MFA, key rotation, etc) against your cloud environment.
- Report Building: Builds JSON & PDF reports that summarize findings from each test & tool.
- Upload: Share full audit packages (evidence & audit reports) with auditors, customers, and regulators.
Philosophy:
- Lightweight: You can setup this library in minutes, and it doesn't require intensive integrations with your cloud providers. This eliminates vendor lock-in and gives you control over how your data is processed.
- Repeatability: Clear instructions explain how evidence was gathered and describes the test procedures that were performed. Share your AuditOps report + supporting evidence, and kindly ask your auditor to re-perform the work that was already done.
- Anti-Checkbox: We all know that compliance has become a check-box exercise. We hope you'll use this library to fight against it and start holding everyone to higher standard.
1 maintainer
Metadata
1 maintainer
Release files for auditops 0.1.4
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| auditops-0.1.4.tar.gz | 218.8 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| auditops-0.1.4-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 459.4 kB
Release files / auditops-0.1.4.tar.gz
| Download URL | auditops-0.1.4.tar.gz |
|---|---|
| Size | 218.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
876bb9c2ddb402bc9a80d62f10970905121c3c01a2e872056afe0a740fcf2f13
|
|
BLAKE2b-256 checksum How to use checksums |
9fc7f4f62adc4a886199d1dfc5163bc40bfd644f657cb4fe697eacba38f4434d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.1
|
Release files / auditops-0.1.4-py3-none-any.whl
| Download URL | auditops-0.1.4-py3-none-any.whl |
|---|---|
| Size | 240.6 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
9d89b1586bb1d1f2019981eead62c4cc38ecdb4df90dd4863b2269ab873438f5
|
|
BLAKE2b-256 checksum How to use checksums |
3c9388e82353b45d96815adf3fa85841f2bcec6a06731dca3b364d59ba0f9af6
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.1
|
Security for auditops 0.1.4
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
