Scripts, queries, and guides that help auditors programmatically gather evidence from real environments — databases, Linux systems, cloud platforms, and more.
Ready-to-run scripts for common audit procedures: pseudo-random sampling, GITC extraction, database user access, Linux OS reports, and more. Use as-is or adapt to your environment.
Step-by-step guides on building your own audit automation using Python, the CLI, and APIs. Good starting point if you're new to scripting or want to extend existing tools.
Coverage across the systems auditors most commonly deal with, with more being added.
User access, privilege levels, password rotation checks — for PostgreSQL, MySQL, and others.
Shell scripts to generate system reports: users, groups, sudoers, login history, and more.
Reproducible pseudo-random sampling with a fixed seed — a core procedure for most audits.
Tracking and visualization utilities for audit project data and findings.
Scripts targeting specific application-layer controls across common enterprise software.
Fork, add a script for your stack, and open a PR. All audit-relevant tools considered.