Audit

LighthouseJavaScript

An automated tool for auditing web page quality, performance, accessibility, SEO, and best practices.

Docker bench securityShell

A script that checks for dozens of common best-practices around deploying Docker containers in production.

PaperTrailRuby

Track changes to your Rails models for auditing, versioning, and reverting to previous states.

Laravel ActivitylogPHP

A Laravel package for logging user activities and model events with a simple API.

AuditedRuby

An ActiveRecord extension for Rails that logs all changes to your models, including who made them and why.

Laravel AuditingPHP

A Laravel package that records change logs from Eloquent models to track discrepancies and anomalies.

Audit.NETC#

An extensible framework to audit executing operations in .NET and .NET Core, generating detailed audit logs with evidence for reconstruction.

OWASP MASVSPython

The OWASP Mobile Application Security Verification Standard (MASVS) is the industry standard for mobile app security.

SQLEGo

A SQL quality management platform supporting multiple databases, covering pre-control, post-supervision, and standard release for full lifecycle governance.

g3proxyRust

A suite of enterprise-grade proxy solutions including forward proxy, reverse proxy, load balancer, and NAT traversal built in Rust.

monitor-table-change-with-sqltabledependencyC#

A C# component that provides SQL Server record change notifications, delivering updated values without polling.

active_snapshotRuby

A Ruby gem for creating and restoring explicit snapshots of ActiveRecord models and their associations with a transparent, white-box design.

Audit Algorithms

A curated list of algorithms and academic papers for auditing black-box algorithms like recommendation systems and classifiers.

Cognito ScannerPython

A Python script that implements security testing attacks against AWS Cognito, including account oracle and privilege escalation.

bemi-railsRuby

Automatic, context-aware data change tracking for Ruby on Rails applications using PostgreSQL.

drydockPython

A flexible Docker security audit tool using customizable audit profiles based on CIS benchmarks.