Audit Catalog
Every system gets the same rigor. Our 204-audit catalog ensures comprehensive validation across security, performance, code quality, and user experience.
How Our Audits Work
Objective Scoring
Each area is scored 1-5 with clear criteria. No ambiguity, no opinions.
Detailed Findings
Every finding includes explanation, evidence, and severity rating.
Risk Identification
Issues are classified by severity so you know what to prioritize.
Actionable Steps
Recommendations are prioritized by impact to guide your roadmap.
Full Audit Catalog
Security
9 auditsSecurity audits covering authentication, authorization, data protection, and vulnerability assessment.
API Security Audit
This document provides a structured checklist and evaluation framework for performing an API security audit. It covers authentication, authorization, input validation, rate limiting, and security best practices.
Authentication & Authorization Audit
This document defines a framework-agnostic Authentication & Authorization Audit for modern web applications. It evaluates the security and correctness of user identity verification and access control systems. This audit answers a critical question:
Cloud Security Posture Audit
This document provides a structured checklist and evaluation framework for performing a cloud security posture audit. It covers identity management, network security, data protection, compliance, and security monitoring across cloud environments.
Kubernetes & Container Security Audit
This document provides a structured checklist and evaluation framework for performing a Kubernetes and container security audit. It covers pod security, network policies, secrets management, image scanning, and cluster configuration.
Web Application Security Audit (Laravel)
A comprehensive security audit for Laravel-based web applications.
Web Application Security Audit (Laravel)
This document provides a structured checklist and evaluation framework for performing a security audit of a Laravel-based web application. It is suitable for internal reviews, client deliverables, and pre-production security validation.
WordPress Security Audit
This document provides a structured checklist and evaluation framework for performing a WordPress security audit. It covers core security, plugin/theme vulnerabilities, user management, server configuration, and security hardening.
Zero Trust Architecture Audit
This document provides a structured checklist and evaluation framework for performing a zero trust architecture audit. It covers identity verification, device trust, network segmentation, and continuous validation.
API Security Audit (Enhanced)
Comprehensive API security assessment using critical-veto scoring. Any critical security failure results in automatic audit failure. Demonstrates matrix questions, multi-select options, and repeating items.
Performance
9 auditsPerformance audits analyzing load times, resource optimization, caching, and scalability.
CDN & Edge Performance Audit
This document provides a structured checklist and evaluation framework for performing a CDN and edge performance audit. It covers CloudFront/Cloudflare configuration, caching rules, SSL/TLS settings, and edge function optimization.
Content Analytics & Performance Audit
This document provides a structured checklist and evaluation framework for auditing content performance measurement and analytics. It covers traffic analysis, engagement metrics, conversion tracking, and content ROI.
Cost & Resource Efficiency Audit
This document defines a framework-agnostic Cost & Resource Efficiency Audit for modern web applications. It evaluates infrastructure spending, resource utilization, and optimization opportunities. This audit answers a critical question:
Mobile App Performance Profiling Audit
This document provides a structured checklist and evaluation framework for performing an in-depth mobile app performance analysis. It covers startup time, memory, CPU, battery, and runtime optimization.
Performance & Load Testing Audit
This document provides a structured checklist and evaluation framework for performing a performance and load testing audit. It covers test design, execution, analysis, and continuous performance testing.
Performance & Scalability Audit (Laravel)
This document defines a structured Performance & Scalability Audit for a Laravel-based web application. It evaluates whether the application is fast today and capable of scaling reliably as usage grows. List the most significant performance constraints discovered during the audit.
Performance & Scalability Audit (Web Application)
This document defines a framework-agnostic Performance & Scalability Audit for modern web applications. It is designed to demonstrate the processes, rigor, and value applied to every project, regardless of technology stack. This audit answers a critical business question:
Web Performance Optimization Audit
A comprehensive performance audit for web applications.
Website Performance Audit (Enhanced)
Comprehensive website performance assessment using points-based scoring. Evaluates Core Web Vitals, asset optimization, caching, and JavaScript performance with percentage-based metrics.
Code Quality
19 auditsCode quality audits evaluating maintainability, best practices, and technical debt.
A/B Testing Program Audit
This document provides a structured checklist and evaluation framework for performing an A/B testing program audit. It covers testing methodology, platform utilization, and optimization culture.
Accessibility Testing Audit
This document provides a structured checklist and evaluation framework for performing an accessibility testing audit. It covers automated testing, manual testing, assistive technology, and compliance.
Architecture & Code Quality Audit (Web Application)
This document defines a framework-agnostic Architecture & Code Quality Audit for modern web applications. It is designed to evaluate whether a codebase is maintainable, extensible, and safe to evolve over time. This audit answers a critical long-term question:
Code Review Process Audit
This document provides a structured checklist and evaluation framework for performing a code review process audit. It covers review practices, tooling, quality gates, team dynamics, and continuous improvement.
Documentation & Knowledge Transfer Audit
This document defines a framework-agnostic Documentation & Knowledge Transfer Audit for modern web applications. It evaluates the completeness and quality of documentation to reduce key-person dependencies. This audit answers a critical question:
Documentation Quality Audit
This document provides a structured checklist and evaluation framework for performing a documentation quality audit. It covers technical documentation, API docs, user guides, process docs, and documentation maintenance.
Internationalization (i18n) Architecture Audit
This document provides a structured checklist and evaluation framework for auditing internationalization code architecture. It covers string externalization, locale handling, and framework implementation.
Knowledge Base Architecture Audit
This document provides a structured checklist and evaluation framework for auditing knowledge base structure and information architecture. It covers taxonomy, content relationships, and knowledge management.
Localization Testing Audit
This document provides a structured checklist and evaluation framework for auditing localization testing processes and quality. It covers linguistic testing, functional testing, and localization bug management.
Maintainability & Onboarding Audit
This document defines a framework-agnostic Maintainability & Onboarding Audit for modern web applications. It evaluates how quickly new developers can become productive and how sustainable the codebase is for ongoing development. This audit answers a critical question:
Microservices Architecture Audit
This document provides a structured checklist and evaluation framework for performing a microservices architecture audit. It covers service design, communication, deployment, and operations.
Mobile Testing & Quality Assurance Audit
This document provides a structured checklist and evaluation framework for auditing mobile-specific testing practices and coverage. It covers unit testing, UI automation, device testing, and CI/CD integration.
Mobile Testing Audit
This document provides a structured checklist and evaluation framework for performing a mobile testing audit. It covers device coverage, test automation, platform testing, and mobile-specific concerns.
SaaS Multi-Tenancy Architecture Audit
This document provides a structured checklist and evaluation framework for auditing tenant isolation and multi-tenant architecture. It covers data separation, resource limits, and tenant lifecycle management.
Serverless Architecture Audit
This document provides a structured checklist and evaluation framework for performing a serverless architecture audit. It covers Lambda/Functions configuration, cold start optimization, timeout handling, IAM roles, and serverless best practices.
Technical Debt Audit
This document provides a structured checklist and evaluation framework for performing a technical debt audit. It covers debt identification, measurement, prioritization, and remediation.
Test Automation Strategy Audit
This document provides a structured checklist and evaluation framework for performing a test automation strategy audit. It covers test pyramid, framework selection, CI integration, and maintenance.
Testing Coverage Audit
This document defines a framework-agnostic Testing Coverage Audit for modern web applications. It evaluates test quality, coverage, and automation to assess confidence in code changes. This audit answers a critical question:
TypeScript Code Quality Audit
This document provides a structured checklist and evaluation framework for performing a TypeScript code quality audit. It covers type safety, configuration, patterns, generics, and migration strategies.
Operations
6 auditsOperations audits covering deployment, monitoring, logging, and infrastructure reliability.
Data Integrity & Backup Audit
This document defines a framework-agnostic Data Integrity & Backup Audit for modern web applications. It evaluates data protection, consistency, and recoverability to ensure business continuity. This audit answers a critical question:
Database Health Audit
This document defines a framework-agnostic Database Health Audit for modern web applications. It evaluates database design, performance, and scalability to ensure reliable data layer operations. This audit answers a critical question:
DevOps & Deployment Audit
This document defines a framework-agnostic DevOps & Deployment Audit for modern web applications. It evaluates the reliability, automation, and safety of deployment processes. This audit answers a critical question:
Infrastructure Monitoring Audit
This document provides a structured checklist and evaluation framework for performing an infrastructure monitoring audit. It covers metrics collection, alerting, dashboards, and incident response.
Log Management Audit
This document provides a structured checklist and evaluation framework for performing a log management audit. It covers log collection, storage, analysis, and security.
Logging & Observability Audit
This document defines a framework-agnostic Logging & Observability Audit for modern web applications. It evaluates the ability to monitor, diagnose, and respond to issues in production. This audit answers a critical question:
User Experience
4 auditsUX audits evaluating usability, accessibility, design consistency, and user satisfaction.
Accessibility & Compliance Audit
This document defines a framework-agnostic Accessibility & Compliance Audit for modern web applications. It evaluates whether an application is usable by all users, including those with disabilities, and assesses legal compliance risks. This audit answers a critical question:
Mobile Responsiveness Audit
This document defines a framework-agnostic Mobile Responsiveness Audit for modern web applications. It evaluates cross-device compatibility and mobile user experience. This audit answers a critical question:
SEO & Discoverability Audit
This document defines a framework-agnostic SEO & Discoverability Audit for modern web applications. It evaluates search engine optimization and content findability. This audit answers a critical question:
User Experience (UX) Audit
This document defines a framework-agnostic User Experience Audit for modern web applications. It evaluates usability, efficiency, and satisfaction of real user interactions. This audit answers a critical question:
Integrations
10 auditsIntegration audits reviewing third-party services, APIs, and external dependencies.
CRM Integration Audit
This document provides a structured checklist and evaluation framework for performing a CRM integration audit. It covers data synchronization, workflow automation, and system connectivity.
Crypto Wallet Integration Audit
A comprehensive audit of web3 wallet connections, transaction signing, and dApp-wallet interaction security.
Integration & API Health Audit
This document defines a framework-agnostic Integration & API Health Audit for modern web applications. It evaluates the reliability and maintainability of third-party connections and API dependencies. This audit answers a critical question:
Layer 2 / Rollup Integration Audit
A comprehensive audit of Layer 2 scaling solution implementations, bridges, and cross-layer communication.
LLM Integration Audit
This document provides a structured checklist and evaluation framework for performing an LLM integration audit. It covers API integration, prompt engineering, response handling, cost management, and safety considerations.
Mobile Backend API Integration Audit
This document provides a structured checklist and evaluation framework for auditing mobile app backend API integration patterns. It covers versioning, authentication, caching, and error handling.
Payment Gateway Integration Audit
This document provides a structured checklist and evaluation framework for performing a payment gateway integration audit. It covers Stripe, PayPal, and other processor integrations including error handling, webhook reliability, refund processing, and PCI compliance scope.
Stripe Integration Best Practices Audit
This document provides a structured checklist and evaluation framework for performing a Stripe integration best practices audit. It covers account configuration, integration quality, Stripe feature utilization, and compliance to ensure reliable payment processing and optimal use of Stripe capabilities.
Third-Party Integration Audit
This document provides a structured checklist and evaluation framework for performing a third-party integration audit. It covers API integrations, security, reliability, and maintenance.
Webhook Implementation Audit
This document provides a structured checklist and evaluation framework for performing a webhook implementation audit. It covers webhook design, security, reliability, and operations.
Compliance
14 auditsRegulatory compliance audits for GDPR, HIPAA, SOC2, PCI-DSS, and data privacy frameworks.
CCPA Consumer Privacy Audit
This document provides a structured checklist and evaluation framework for performing a CCPA (California Consumer Privacy Act) compliance audit. It covers consumer privacy rights, data collection disclosure requirements, and opt-out mechanisms for organizations processing California resident data.
Content Governance & Compliance Audit
This document provides a structured checklist and evaluation framework for auditing content governance, legal compliance, and accessibility. It covers content policies, regulatory requirements, and accessibility standards.
Cookie Consent & Tracking Audit
This document provides a structured checklist and evaluation framework for performing a cookie consent and tracking compliance audit. It covers cookie banners, consent management, analytics compliance, and third-party script governance under GDPR, CCPA, and ePrivacy regulations.
Data Retention & Deletion Audit
This document provides a structured checklist and evaluation framework for performing a data retention and deletion compliance audit. It covers retention policies, automated deletion procedures, archival practices, and legal hold management across organizational data stores.
GDPR Compliance Audit
This document provides a structured checklist and evaluation framework for performing a GDPR (General Data Protection Regulation) compliance audit. It covers data privacy, consent management, data subject rights, and cross-border transfer requirements for organizations processing EU citizen data.
HIPAA Technical Safeguards Audit
This document provides a structured checklist and evaluation framework for performing a HIPAA Technical Safeguards audit. It covers the technical controls required under the HIPAA Security Rule to protect electronic Protected Health Information (ePHI).
PCI-DSS Compliance Audit
This document provides a structured checklist and evaluation framework for performing a PCI-DSS (Payment Card Industry Data Security Standard) compliance audit. It covers the 12 requirements for protecting cardholder data and maintaining a secure payment environment.
Privacy Policy & Terms Audit
This document provides a structured checklist and evaluation framework for performing a privacy policy and terms of service audit. It covers policy completeness, legal accuracy, accessibility, and compliance with global privacy regulations.
Regional Compliance & Legal Audit
This document provides a structured checklist and evaluation framework for auditing regional legal compliance and market-specific requirements. It covers privacy regulations, local laws, and market entry requirements.
Regulatory Compliance Audit
This document provides a structured checklist and evaluation framework for performing a Regulatory Compliance audit. It covers industry regulations, compliance programs, documentation, and monitoring to ensure business operations meet applicable regulatory requirements.
SOC 2 Type II Readiness Audit
This document provides a structured checklist and evaluation framework for performing a SOC 2 Type II readiness audit. It covers the five Trust Services Criteria (TSC): Security, Availability, Processing Integrity, Confidentiality, and Privacy.
Software Licensing Compliance Audit
This document provides a structured checklist and evaluation framework for performing a software licensing compliance audit. It covers license inventory, usage compliance, open source obligations, and audit readiness to ensure proper software usage and minimize compliance risk.
Tax Compliance & Calculation Audit
This document provides a structured checklist and evaluation framework for performing a tax compliance and calculation audit. It covers tax configuration, calculation accuracy, reporting, and special scenarios to ensure proper tax collection and regulatory compliance across jurisdictions.
Terms of Service & Privacy Policy Audit
This document provides a structured checklist and evaluation framework for performing a Terms of Service and Privacy Policy audit. It covers legal document completeness, regulatory compliance, enforceability, and jurisdiction-specific requirements to ensure website legal documents protect the business and meet regulatory requirements.
E-Commerce
5 auditsE-commerce audits covering checkout flows, payments, inventory, and online store operations.
E-Commerce Checkout Flow Audit
This document provides a structured checklist and evaluation framework for performing an e-commerce checkout flow audit. It covers cart functionality, checkout UX, abandonment risks, payment integration, and mobile checkout optimization.
Inventory & Order Management Audit
This document provides a structured checklist and evaluation framework for performing an inventory and order management audit. It covers stock tracking, overselling prevention, order lifecycle management, and fulfillment processes.
Pricing & Promotions Audit
This document provides a structured checklist and evaluation framework for performing a pricing and promotions audit. It covers price accuracy, discount logic, coupon security, promotional display, and pricing strategy implementation.
Product Catalog & Search Audit
This document provides a structured checklist and evaluation framework for performing a product catalog and search audit. It covers product data quality, search relevance, filtering capabilities, and faceted navigation.
Shipping & Tax Calculation Audit
This document provides a structured checklist and evaluation framework for performing a shipping and tax calculation audit. It covers shipping rate accuracy, tax compliance, international shipping, and address validation.
Cloud & Infrastructure
5 auditsCloud infrastructure audits for AWS, Azure, GCP, containers, and serverless architectures.
AWS Infrastructure Audit
This document provides a structured checklist and evaluation framework for performing an AWS infrastructure audit. It covers IAM security, VPC configuration, S3 bucket security, EC2 best practices, CloudWatch monitoring, and cost optimization.
Disaster Recovery & Business Continuity Audit
This document provides a structured checklist and evaluation framework for performing a disaster recovery and business continuity audit. It covers RTO/RPO definitions, failover procedures, backup testing, and runbook completeness.
Infrastructure as Code Audit
This document provides a structured checklist and evaluation framework for performing an Infrastructure as Code (IaC) audit. It covers Terraform/CDK quality, state management, drift detection, secrets handling, and IaC best practices.
Infrastructure Automation Audit
This document provides a structured checklist and evaluation framework for performing an infrastructure automation audit. It covers Infrastructure as Code, configuration management, and automation practices.
Load Balancer & Scaling Audit
This document provides a structured checklist and evaluation framework for performing a load balancer and scaling audit. It covers ALB/NLB configuration, auto-scaling policies, health checks, SSL termination, and high availability.
Frontend & JavaScript
7 auditsFrontend framework audits for React, Vue, Angular, Node.js, and modern JavaScript applications.
Browser Compatibility Audit
This document provides a structured checklist and evaluation framework for performing a browser compatibility audit. It covers cross-browser testing, polyfills, CSS compatibility, progressive enhancement, and graceful degradation.
Frontend Build & Bundle Audit
This document provides a structured checklist and evaluation framework for performing a frontend build and bundle audit. It covers Webpack/Vite configuration, bundle optimization, code splitting, tree shaking, and build performance.
Next.js Application Audit
This document provides a structured checklist and evaluation framework for performing a Next.js application audit. It covers SSR/SSG strategies, API routes, image optimization, ISR, middleware, and App Router patterns.
Node.js Backend Audit
This document provides a structured checklist and evaluation framework for performing a Node.js backend audit. It covers Express/Fastify patterns, async handling, security practices, clustering, and Node.js best practices.
React Application Audit
This document provides a structured checklist and evaluation framework for performing a React application audit. It covers component architecture, state management, hooks usage, performance optimization, and testing practices.
React Native Application Audit
This document provides a structured checklist and evaluation framework for performing a React Native application audit. It covers cross-platform code quality, native integration, performance, and deployment.
Vue.js Application Audit
This document provides a structured checklist and evaluation framework for performing a Vue.js application audit. It covers Composition API usage, state management with Pinia, routing, SSR considerations, and Vue 3 best practices.
WordPress & CMS
5 auditsCMS audits for WordPress security, performance, plugins, and headless CMS architectures.
Content Migration Audit
This document provides a structured checklist and evaluation framework for performing a content migration audit. It covers migration planning, data mapping, content transformation, validation, and rollback procedures.
Editorial Workflow Audit
This document provides a structured checklist and evaluation framework for performing an editorial workflow audit. It covers content creation, review processes, publishing workflows, and team collaboration.
Headless CMS Audit
This document provides a structured checklist and evaluation framework for performing a headless CMS audit. It covers API design, content modeling, frontend integration, performance, and security considerations.
WordPress Plugin Audit
This document provides a structured checklist and evaluation framework for performing a WordPress plugin audit. It covers plugin architecture, hooks system, database interactions, security, and WordPress plugin standards.
WordPress Theme Audit
This document provides a structured checklist and evaluation framework for performing a WordPress theme audit. It covers theme structure, template hierarchy, performance, security, and WordPress coding standards.
AI & Modern Tech
6 auditsEmerging technology audits for AI/ML integration, LLMs, chatbots, and RAG systems.
AI Chatbot Audit
This document provides a structured checklist and evaluation framework for performing an AI chatbot audit. It covers conversation design, NLU quality, integration, user experience, and safety considerations.
AI Ethics & Governance Audit
This document provides a structured checklist and evaluation framework for performing an AI ethics and governance audit. It covers ethical AI principles, governance frameworks, transparency, accountability, and regulatory compliance.
AI/ML Model Audit
This document provides a structured checklist and evaluation framework for performing an AI/ML model audit. It covers model development, training data, evaluation, deployment, and monitoring considerations.
RAG System Audit
This document provides a structured checklist and evaluation framework for performing a Retrieval-Augmented Generation (RAG) system audit. It covers document processing, embedding strategy, retrieval quality, generation, and system reliability.
Voice Interface Audit
This document provides a structured checklist and evaluation framework for performing a voice interface audit. It covers voice UX design, speech recognition, natural language processing, and privacy.
VR/AR Application Audit
This document provides a structured checklist and evaluation framework for performing a VR/AR application audit. It covers user experience, performance, safety, and platform compliance.
Business Process
8 auditsBusiness process audits for user journeys, conversion funnels, onboarding, and analytics.
Agile Practices Audit
This document provides a structured checklist and evaluation framework for performing an agile practices audit. It covers Scrum/Kanban implementation, team dynamics, and continuous improvement.
Analytics & Tracking Audit
This document provides a structured checklist and evaluation framework for performing an analytics and tracking audit. It covers data collection, event tracking, reporting, attribution, and privacy compliance.
Change Management Audit
This document provides a structured checklist and evaluation framework for performing a change management audit. It covers change processes, risk assessment, approval workflows, and rollback procedures.
Conversion Funnel Audit
This document provides a structured checklist and evaluation framework for performing a conversion funnel audit. It covers funnel stages, drop-off analysis, optimization opportunities, and conversion rate optimization practices.
Customer Support System Audit
This document provides a structured checklist and evaluation framework for performing a customer support system audit. It covers support channels, ticket management, self-service, SLAs, and customer satisfaction.
Email & Notification System Audit
This document provides a structured checklist and evaluation framework for performing an email and notification system audit. It covers transactional emails, marketing automation, push notifications, deliverability, and user preferences.
User Onboarding Flow Audit
This document provides a structured checklist and evaluation framework for performing a user onboarding flow audit. It covers signup process, activation, user education, retention hooks, and success metrics.
Vendor Management Audit
This document provides a structured checklist and evaluation framework for performing a vendor management audit. It covers vendor selection, contract management, performance monitoring, and risk assessment.
Data & Database
7 auditsDatabase audits covering schema design, data integrity, backup strategies, query optimization, and data lifecycle management.
Data Pipeline Audit
This document provides a structured checklist and evaluation framework for performing a data pipeline audit. It covers architecture, reliability, monitoring, and data quality.
Data Warehouse Audit
This document provides a structured checklist and evaluation framework for performing a data warehouse audit. It covers architecture, data modeling, performance, and governance.
IoT Data Pipeline Audit
A comprehensive audit of IoT telemetry ingestion, processing, and analytics infrastructure.
MongoDB Database Audit
This document provides a structured checklist and evaluation framework for performing a MongoDB database audit. It covers schema design, indexing, security, and operational practices.
MySQL Database Audit
This document provides a structured checklist and evaluation framework for performing a MySQL database audit. It covers configuration, performance, security, and operational practices.
PostgreSQL Database Audit
This document provides a structured checklist and evaluation framework for performing a PostgreSQL database audit. It covers configuration, performance, security, and operational practices.
Redis Database Audit
This document provides a structured checklist and evaluation framework for performing a Redis database audit. It covers configuration, memory management, security, and operational practices.
API & Microservices
3 auditsAPI audits for design patterns, versioning, documentation, rate limiting, service mesh, and contract testing.
API Documentation Audit
This document provides a structured checklist and evaluation framework for auditing API documentation quality and completeness. It covers OpenAPI specs, developer experience, and documentation accuracy.
GraphQL API Audit
This document provides a structured checklist and evaluation framework for performing a GraphQL API audit. It covers schema design, security, performance, and developer experience.
REST API Design Audit
This document provides a structured checklist and evaluation framework for performing a REST API design audit. It covers API design principles, security, documentation, and developer experience.
DevOps & CI/CD
5 auditsDevOps audits covering pipeline efficiency, deployment automation, environment parity, release management, and feature flags.
CI/CD Pipeline Audit
This document provides a structured checklist and evaluation framework for performing a CI/CD pipeline audit. It covers build processes, testing automation, deployment strategies, security, and reliability.
Docker Environment Audit
This document provides a structured checklist and evaluation framework for performing a Docker environment audit. It covers image management, container configuration, security, and operational practices.
Mobile Release & Deployment Audit
This document provides a structured checklist and evaluation framework for auditing mobile release processes and deployment practices. It covers build automation, code signing, staged rollouts, and monitoring.
Release Management Audit
This document provides a structured checklist and evaluation framework for performing a release management audit. It covers release processes, versioning, deployment strategies, and rollback procedures.
SaaS Feature Flagging & Entitlements Audit
This document provides a structured checklist and evaluation framework for auditing feature access control and entitlement management. It covers feature flags, plan-based gating, and rollout strategies.
Vendor & Third-Party Risk
4 auditsVendor risk audits for SLA compliance, dependency audits, supply chain security, and vendor security posture assessment.
Employment & Contractor Agreement Audit
This document provides a structured checklist and evaluation framework for performing an Employment and Contractor Agreement audit. It covers employment agreements, contractor documentation, worker classification, and compliance documentation to ensure proper workforce documentation and minimize misclassification risk.
Third-Party Privacy Risk Audit
A comprehensive audit of vendor privacy practices, data processor agreements, and third-party risk management.
Translation Management System (TMS) Audit
This document provides a structured checklist and evaluation framework for auditing translation management systems and workflows. It covers TMS configuration, workflow automation, and vendor management.
Vendor Contract Management Audit
This document provides a structured checklist and evaluation framework for performing a Vendor Contract Management audit. It covers contract inventory, risk assessment, performance management, and contract terms to ensure effective vendor relationship management and risk mitigation.
Disaster Recovery & Business Continuity
1 auditDR/BC audits covering backup verification, RTO/RPO compliance, failover testing, and incident response playbooks.
Disaster Recovery Audit
This document provides a structured checklist and evaluation framework for performing a disaster recovery audit. It covers DR planning, backup strategies, recovery procedures, and testing.
Mobile Applications
8 auditsMobile app audits for iOS/Android guidelines, app store compliance, offline sync, push notifications, and deep linking.
Android Application Audit
This document provides a structured checklist and evaluation framework for performing an Android application audit. It covers Kotlin/Java code quality, Play Store guidelines, security, and performance.
App Store Optimization (ASO) Audit
This document provides a structured checklist and evaluation framework for performing an App Store Optimization audit. It covers metadata, visuals, ratings, and discoverability across iOS App Store and Google Play Store.
Flutter Application Audit
This document provides a structured checklist and evaluation framework for performing a Flutter application audit. It covers Dart code quality, widget architecture, platform integration, and performance.
iOS Application Audit
This document provides a structured checklist and evaluation framework for performing an iOS application audit. It covers Swift/SwiftUI code quality, App Store guidelines, security, and performance.
Mobile App Analytics & Attribution Audit
This document provides a structured checklist and evaluation framework for auditing mobile analytics implementation and marketing attribution. It covers SDK integration, event tracking, attribution providers, and privacy compliance.
Mobile In-App Purchase & Monetization Audit
This document provides a structured checklist and evaluation framework for auditing in-app purchases, subscriptions, and revenue integrity. It covers store integration, receipt validation, and billing compliance.
Mobile Offline & Sync Audit
This document provides a structured checklist and evaluation framework for auditing offline-first architecture and data synchronization. It covers local storage, conflict resolution, and sync reliability.
Mobile Push Notification Audit
This document provides a structured checklist and evaluation framework for auditing push notification implementation and engagement. It covers permission handling, notification delivery, and user experience.
SaaS & Subscription
13 auditsSaaS platform audits covering multi-tenancy, billing integration, usage metering, churn prevention, and onboarding flows.
Multi-Currency & International Billing Audit
This document provides a structured checklist and evaluation framework for performing a multi-currency and international billing audit. It covers currency configuration, pricing strategy, international payments, and tax compliance to ensure reliable global revenue operations.
Payment Reconciliation & Settlement Audit
This document provides a structured checklist and evaluation framework for performing a payment reconciliation and settlement audit. It covers daily reconciliation processes, settlement accuracy, exception management, and month-end close procedures to ensure financial records match actual cash flows.
Revenue Recognition & Billing Accuracy Audit
This document provides a structured checklist and evaluation framework for performing a revenue recognition and billing accuracy audit. It covers billing configuration, revenue recognition compliance, invoice accuracy, and billing system integration to ensure financial accuracy and regulatory compliance.
SaaS Agreement Review Audit
This document provides a structured checklist and evaluation framework for performing a SaaS Agreement Review audit. It covers subscription terms, service levels, data handling, and customer protections to ensure SaaS agreements are balanced and protective for both providers and customers.
SaaS Customer Health & Success Audit
This document provides a structured checklist and evaluation framework for auditing customer health scoring and success management. It covers health indicators, risk prediction, and proactive engagement strategies.
SaaS Data Portability & Export Audit
This document provides a structured checklist and evaluation framework for auditing data export capabilities and portability compliance. It covers data export formats, API access, and regulatory compliance.
SaaS Onboarding & Activation Audit
This document provides a structured checklist and evaluation framework for auditing user onboarding flows and activation metrics. It covers signup experience, first-time user experience, and time-to-value optimization.
SaaS Subscription Lifecycle Audit
This document provides a structured checklist and evaluation framework for auditing subscription management and billing lifecycle. It covers plan management, upgrades/downgrades, cancellation, and revenue operations.
SaaS Usage Metering & Billing Audit
This document provides a structured checklist and evaluation framework for auditing usage-based billing and metering systems. It covers event collection, aggregation, and billing integration.
SaaS User Provisioning & SSO Audit
This document provides a structured checklist and evaluation framework for auditing enterprise user management and SSO integration. It covers SCIM, SAML, OAuth/OIDC, and directory synchronization.
Subscription & Recurring Billing Audit
This document provides a structured checklist and evaluation framework for performing a subscription and recurring billing audit. It covers subscription lifecycle management, billing cycles, dunning, upgrades/downgrades, and proration handling.
Subscription Billing & Dunning Audit
This document provides a structured checklist and evaluation framework for performing a subscription billing and dunning audit. It covers subscription lifecycle management, dunning configuration, payment method management, and churn metrics to maximize revenue retention and minimize involuntary churn.
SaaS Application Audit (Enhanced)
Comprehensive SaaS platform assessment using maturity model scoring. Evaluates multi-tenancy, billing, scalability, and operational excellence across CMMI maturity levels.
Content & SEO
7 auditsContent and SEO audits for content strategy, technical SEO, schema markup, Core Web Vitals, and crawlability.
Content Quality & E-E-A-T Audit
This document provides a structured checklist and evaluation framework for auditing content quality and E-E-A-T signals. It covers Experience, Expertise, Authoritativeness, and Trustworthiness.
Content Strategy & Planning Audit
This document provides a structured checklist and evaluation framework for auditing content strategy and editorial planning. It covers content pillars, editorial calendars, and content governance.
Link Building & Off-Page SEO Audit
This document provides a structured checklist and evaluation framework for auditing link building strategies and backlink profile health. It covers link acquisition, competitor analysis, and link quality assessment.
Local SEO Audit
This document provides a structured checklist and evaluation framework for auditing local search optimization. It covers Google Business Profile, local citations, reviews, and local content strategy.
Multilingual SEO Audit
This document provides a structured checklist and evaluation framework for auditing multilingual and multi-regional SEO. It covers hreflang implementation, international targeting, and localized content optimization.
On-Page SEO Audit
This document provides a structured checklist and evaluation framework for auditing on-page SEO elements. It covers meta tags, content optimization, heading structure, and keyword implementation.
Technical SEO Audit
This document provides a structured checklist and evaluation framework for auditing technical SEO implementation. It covers crawlability, indexability, site architecture, and Core Web Vitals.
Localization & i18n
3 auditsInternationalization audits covering translation workflows, RTL support, date/currency formatting, and cultural adaptation.
Content Localization Audit
This document provides a structured checklist and evaluation framework for auditing content localization quality and processes. It covers translation quality, cultural adaptation, and content parity.
Locale Formatting & Standards Audit
This document provides a structured checklist and evaluation framework for auditing locale-specific formatting and data standards. It covers date/time, numbers, currency, and address formatting across regions.
RTL & Bidirectional Text Audit
This document provides a structured checklist and evaluation framework for auditing right-to-left (RTL) language support and bidirectional text handling. It covers layout mirroring, text direction, and mixed-content scenarios.
Documentation & Knowledge
6 auditsDocumentation audits for code docs, API documentation, runbooks, knowledge base accuracy, and onboarding materials.
Developer Documentation Audit
This document provides a structured checklist and evaluation framework for auditing developer-focused documentation. It covers code documentation, SDK guides, and developer experience.
Documentation Metrics & Analytics Audit
This document provides a structured checklist and evaluation framework for auditing documentation measurement and optimization. It covers analytics setup, performance metrics, and continuous improvement.
Documentation Tooling & Platform Audit
This document provides a structured checklist and evaluation framework for auditing documentation tools and platforms. It covers authoring tools, publishing platforms, and workflow automation.
Internal Documentation Audit
This document provides a structured checklist and evaluation framework for auditing internal documentation and team knowledge. It covers runbooks, wikis, and operational documentation.
Technical Writing Standards Audit
This document provides a structured checklist and evaluation framework for auditing technical writing quality and standards. It covers style guides, consistency, and documentation best practices.
User Documentation & Help Center Audit
This document provides a structured checklist and evaluation framework for auditing user-facing documentation and help resources. It covers help centers, knowledge bases, and end-user guides.
Blockchain & Web3
6 auditsWeb3 audits covering smart contract security, wallet integration, gas optimization, and decentralization patterns.
Blockchain & Smart Contract Audit
This document provides a structured checklist and evaluation framework for performing a blockchain and smart contract audit. It covers smart contract security, blockchain architecture, and operational practices.
Blockchain Node Operations Audit
A comprehensive audit of self-hosted blockchain node infrastructure, RPC endpoints, and validator security.
Cross-chain Interoperability Audit
A comprehensive audit of cross-chain bridges, interoperability protocols, and multi-chain asset management.
DAO Governance Audit
A comprehensive audit of decentralized autonomous organization governance mechanisms, voting systems, and treasury management.
NFT Platform Audit
A comprehensive audit of NFT minting, marketplace, metadata systems, and smart contract implementations for ERC-721 and ERC-1155 tokens.
Token Economics Audit
A comprehensive audit of token distribution, vesting schedules, staking mechanisms, and economic model sustainability.
IoT & Edge Computing
6 auditsIoT audits for device security, firmware updates, edge processing, and connectivity resilience.
Edge Computing Audit
This document provides a structured checklist and evaluation framework for performing an edge computing audit. It covers edge architecture, deployment, security, and operations.
Edge Computing Platform Audit
A comprehensive security audit of edge computing infrastructure, workloads, and edge-to-cloud communication.
IoT Communication Protocol Audit
A comprehensive security audit of IoT messaging protocols including MQTT, CoAP, and related communication security.
IoT Firmware Update Audit
A comprehensive audit of over-the-air (OTA) update mechanisms and firmware lifecycle security.
IoT Fleet Management Audit
A comprehensive audit of large-scale IoT device fleet operations, provisioning, and lifecycle management.
Real-Time Systems Audit
This document provides a structured checklist and evaluation framework for performing a real-time systems audit. It covers latency requirements, message delivery, scalability, and reliability.
Privacy Engineering
8 auditsPrivacy-focused audits covering data minimization, consent management, anonymization, and privacy by design principles.
Consent Management Audit
A comprehensive audit of consent collection, storage, and management systems for GDPR and privacy compliance.
Cross-Border Data Transfer Audit
A comprehensive audit of international data transfers, transfer mechanisms, and compliance with data localization requirements.
Data Anonymization & Pseudonymization Audit
A comprehensive audit of data de-identification techniques, anonymization effectiveness, and re-identification risk assessment.
Data Subject Rights (DSAR) Audit
A comprehensive audit of data subject access request handling and privacy rights fulfillment processes.
PII Discovery & Classification Audit
A comprehensive audit of personal data discovery, classification, and data mapping processes.
Privacy by Design Audit
| Check | Status | Score | Notes |
|---|---|---|---|
| Purposes clearly defined | ⬜ | ||
| Purpose binding enforced | ⬜ | ||
| Secondary use requires consent | ⬜ | ||
| Compatible use assessment | ⬜ | ||
| No function creep | ⬜ | ||
| Purpose documented in code | ⬜ | ||
| Data segregation by purpose | ⬜ |
A comprehensive audit of privacy-by-design principles implementation throughout the software development lifecycle.
Privacy Impact Assessment (PIA/DPIA) Audit
A comprehensive audit of privacy impact assessment processes, methodology, and integration with project lifecycles.
Privacy-Preserving Analytics Audit
A comprehensive audit of analytics implementations that protect user privacy while providing business insights.
Financial & Billing
4 auditsFinancial audits for revenue recognition, payment processing accuracy, reconciliation, and fraud prevention.
Accounts Receivable & Collections Audit
This document provides a structured checklist and evaluation framework for performing an accounts receivable and collections audit. It covers invoice delivery, payment terms, collection processes, and AR performance to optimize cash flow and minimize bad debt.
Financial Reporting & Analytics Audit
This document provides a structured checklist and evaluation framework for performing a financial reporting and analytics audit. It covers revenue reporting, cash flow analysis, KPI accuracy, and report integrity to ensure financial data supports accurate decision-making.
Fraud Prevention & Risk Management Audit
This document provides a structured checklist and evaluation framework for performing a fraud prevention and risk management audit. It covers fraud detection rules, transaction monitoring, account security, and dispute management to protect revenue and prevent financial losses.
Refund & Credit Management Audit
This document provides a structured checklist and evaluation framework for performing a refund and credit management audit. It covers refund policy compliance, processing procedures, credit management, and abuse prevention to ensure controlled refund operations while maintaining customer satisfaction.
Legal & Contract
4 auditsLegal audits covering license compliance, terms of service, data processing agreements, and IP protection.
Data Processing Agreement (DPA) Audit
This document provides a structured checklist and evaluation framework for performing a Data Processing Agreement audit. It covers GDPR Article 28 requirements, security measures, data subject rights, and termination provisions to ensure DPAs meet regulatory requirements and protect personal data appropriately.
Intellectual Property Protection Audit
This document provides a structured checklist and evaluation framework for performing an Intellectual Property Protection audit. It covers IP inventory, protection measures, third-party IP compliance, and enforcement to ensure business intellectual property is properly protected and managed.
Master Service Agreement (MSA) Audit
This document provides a structured checklist and evaluation framework for performing a Master Service Agreement audit. It covers core terms, liability provisions, intellectual property, and compliance requirements to ensure contracts provide adequate protection while remaining commercially reasonable.
Partnership & Reseller Agreement Audit
This document provides a structured checklist and evaluation framework for performing a Partnership and Reseller Agreement audit. It covers partner terms, revenue sharing, obligations, and relationship management to ensure partnership agreements are clear, fair, and protective.
Marketing Technology
3 auditsMarketing technology audits covering tag management, marketing automation, CRM integration, A/B testing, and personalization.
Marketing Automation Audit
This document provides a structured checklist and evaluation framework for performing a marketing automation audit. It covers platform utilization, campaign management, lead scoring, and integration.
Personalization Strategy Audit
This document provides a structured checklist and evaluation framework for performing a personalization strategy audit. It covers data collection, segmentation, content delivery, and measurement.
Tag Management Audit
This document provides a structured checklist and evaluation framework for performing a tag management audit. It covers tag implementation, governance, performance, and data quality.
HIPAA Compliance
9 auditsHIPAA compliance audits for healthcare organizations covering PHI protection, technical safeguards, administrative controls, physical security, and breach management.
HIPAA Administrative Safeguards Audit
This document provides a structured checklist and evaluation framework for performing a HIPAA Administrative Safeguards audit. It covers the administrative actions, policies, and procedures required under the HIPAA Security Rule to manage the selection, development, implementation, and maintenance of security measures.
HIPAA Audit Readiness Assessment
This document provides a structured checklist and evaluation framework for performing a HIPAA Audit Readiness assessment. It evaluates an organization's preparedness for an OCR (Office for Civil Rights) HIPAA compliance audit, covering documentation, evidence, and response procedures.
HIPAA Breach Notification Audit
This document provides a structured checklist and evaluation framework for performing a HIPAA Breach Notification audit. It covers the requirements for identifying, assessing, and notifying breaches of unsecured PHI under the HIPAA Breach Notification Rule (45 CFR §§ 164.400-414).
HIPAA Business Associate Agreement Audit
This document provides a structured checklist and evaluation framework for performing a HIPAA Business Associate Agreement (BAA) audit. It covers the requirements for establishing and maintaining compliant business associate relationships under the HIPAA Privacy and Security Rules.
HIPAA PHI Inventory & Data Flow Audit
This document provides a structured checklist and evaluation framework for performing a HIPAA PHI Inventory and Data Flow audit. It covers the identification, classification, and tracking of Protected Health Information throughout the organization to support risk analysis and compliance efforts.
HIPAA Physical Safeguards Audit
This document provides a structured checklist and evaluation framework for performing a HIPAA Physical Safeguards audit. It covers the physical measures, policies, and procedures required under the HIPAA Security Rule to protect electronic information systems and related buildings and equipment.
HIPAA Privacy Rule Compliance Audit
This document provides a structured checklist and evaluation framework for performing a HIPAA Privacy Rule Compliance audit. It covers the requirements for protecting individually identifiable health information and ensuring patient rights under 45 CFR Part 160 and Subparts A and E of Part 164.
HIPAA Risk Analysis Audit
This document provides a structured checklist and evaluation framework for performing a HIPAA Risk Analysis audit. It evaluates the organization's compliance with the HIPAA Security Rule requirement to conduct an accurate and thorough assessment of potential risks and vulnerabilities to ePHI (45 CFR § 164.308(a)(1)(ii)(A)).
HIPAA Training & Awareness Audit
This document provides a structured checklist and evaluation framework for performing a HIPAA Training and Awareness audit. It covers the workforce training requirements under both the HIPAA Privacy Rule (§ 164.530(b)) and Security Rule (§ 164.308(a)(5)) to ensure all workforce members understand their responsibilities for protecting PHI.
Security
9Security audits covering authentication, authorization, data protection, and vulnerability assessment.
API Security Audit
This document provides a structured checklist and evaluation framework for performing an API security audit. It covers authentication, authorization, input validation, rate limiting, and security best practices.
Authentication & Authorization Audit
This document defines a framework-agnostic Authentication & Authorization Audit for modern web applications. It evaluates the security and correctness of user identity verification and access control systems. This audit answers a critical question:
Cloud Security Posture Audit
This document provides a structured checklist and evaluation framework for performing a cloud security posture audit. It covers identity management, network security, data protection, compliance, and security monitoring across cloud environments.
Kubernetes & Container Security Audit
This document provides a structured checklist and evaluation framework for performing a Kubernetes and container security audit. It covers pod security, network policies, secrets management, image scanning, and cluster configuration.
Web Application Security Audit (Laravel)
A comprehensive security audit for Laravel-based web applications.
Web Application Security Audit (Laravel)
This document provides a structured checklist and evaluation framework for performing a security audit of a Laravel-based web application. It is suitable for internal reviews, client deliverables, and pre-production security validation.
WordPress Security Audit
This document provides a structured checklist and evaluation framework for performing a WordPress security audit. It covers core security, plugin/theme vulnerabilities, user management, server configuration, and security hardening.
Zero Trust Architecture Audit
This document provides a structured checklist and evaluation framework for performing a zero trust architecture audit. It covers identity verification, device trust, network segmentation, and continuous validation.
API Security Audit (Enhanced)
Comprehensive API security assessment using critical-veto scoring. Any critical security failure results in automatic audit failure. Demonstrates matrix questions, multi-select options, and repeating items.
Performance
9Performance audits analyzing load times, resource optimization, caching, and scalability.
CDN & Edge Performance Audit
This document provides a structured checklist and evaluation framework for performing a CDN and edge performance audit. It covers CloudFront/Cloudflare configuration, caching rules, SSL/TLS settings, and edge function optimization.
Content Analytics & Performance Audit
This document provides a structured checklist and evaluation framework for auditing content performance measurement and analytics. It covers traffic analysis, engagement metrics, conversion tracking, and content ROI.
Cost & Resource Efficiency Audit
This document defines a framework-agnostic Cost & Resource Efficiency Audit for modern web applications. It evaluates infrastructure spending, resource utilization, and optimization opportunities. This audit answers a critical question:
Mobile App Performance Profiling Audit
This document provides a structured checklist and evaluation framework for performing an in-depth mobile app performance analysis. It covers startup time, memory, CPU, battery, and runtime optimization.
Performance & Load Testing Audit
This document provides a structured checklist and evaluation framework for performing a performance and load testing audit. It covers test design, execution, analysis, and continuous performance testing.
Performance & Scalability Audit (Laravel)
This document defines a structured Performance & Scalability Audit for a Laravel-based web application. It evaluates whether the application is fast today and capable of scaling reliably as usage grows. List the most significant performance constraints discovered during the audit.
Performance & Scalability Audit (Web Application)
This document defines a framework-agnostic Performance & Scalability Audit for modern web applications. It is designed to demonstrate the processes, rigor, and value applied to every project, regardless of technology stack. This audit answers a critical business question:
Web Performance Optimization Audit
A comprehensive performance audit for web applications.
Website Performance Audit (Enhanced)
Comprehensive website performance assessment using points-based scoring. Evaluates Core Web Vitals, asset optimization, caching, and JavaScript performance with percentage-based metrics.
Code Quality
19Code quality audits evaluating maintainability, best practices, and technical debt.
A/B Testing Program Audit
This document provides a structured checklist and evaluation framework for performing an A/B testing program audit. It covers testing methodology, platform utilization, and optimization culture.
Accessibility Testing Audit
This document provides a structured checklist and evaluation framework for performing an accessibility testing audit. It covers automated testing, manual testing, assistive technology, and compliance.
Architecture & Code Quality Audit (Web Application)
This document defines a framework-agnostic Architecture & Code Quality Audit for modern web applications. It is designed to evaluate whether a codebase is maintainable, extensible, and safe to evolve over time. This audit answers a critical long-term question:
Code Review Process Audit
This document provides a structured checklist and evaluation framework for performing a code review process audit. It covers review practices, tooling, quality gates, team dynamics, and continuous improvement.
Documentation & Knowledge Transfer Audit
This document defines a framework-agnostic Documentation & Knowledge Transfer Audit for modern web applications. It evaluates the completeness and quality of documentation to reduce key-person dependencies. This audit answers a critical question:
Documentation Quality Audit
This document provides a structured checklist and evaluation framework for performing a documentation quality audit. It covers technical documentation, API docs, user guides, process docs, and documentation maintenance.
Internationalization (i18n) Architecture Audit
This document provides a structured checklist and evaluation framework for auditing internationalization code architecture. It covers string externalization, locale handling, and framework implementation.
Knowledge Base Architecture Audit
This document provides a structured checklist and evaluation framework for auditing knowledge base structure and information architecture. It covers taxonomy, content relationships, and knowledge management.
Localization Testing Audit
This document provides a structured checklist and evaluation framework for auditing localization testing processes and quality. It covers linguistic testing, functional testing, and localization bug management.
Maintainability & Onboarding Audit
This document defines a framework-agnostic Maintainability & Onboarding Audit for modern web applications. It evaluates how quickly new developers can become productive and how sustainable the codebase is for ongoing development. This audit answers a critical question:
Microservices Architecture Audit
This document provides a structured checklist and evaluation framework for performing a microservices architecture audit. It covers service design, communication, deployment, and operations.
Mobile Testing & Quality Assurance Audit
This document provides a structured checklist and evaluation framework for auditing mobile-specific testing practices and coverage. It covers unit testing, UI automation, device testing, and CI/CD integration.
Mobile Testing Audit
This document provides a structured checklist and evaluation framework for performing a mobile testing audit. It covers device coverage, test automation, platform testing, and mobile-specific concerns.
SaaS Multi-Tenancy Architecture Audit
This document provides a structured checklist and evaluation framework for auditing tenant isolation and multi-tenant architecture. It covers data separation, resource limits, and tenant lifecycle management.
Serverless Architecture Audit
This document provides a structured checklist and evaluation framework for performing a serverless architecture audit. It covers Lambda/Functions configuration, cold start optimization, timeout handling, IAM roles, and serverless best practices.
Technical Debt Audit
This document provides a structured checklist and evaluation framework for performing a technical debt audit. It covers debt identification, measurement, prioritization, and remediation.
Test Automation Strategy Audit
This document provides a structured checklist and evaluation framework for performing a test automation strategy audit. It covers test pyramid, framework selection, CI integration, and maintenance.
Testing Coverage Audit
This document defines a framework-agnostic Testing Coverage Audit for modern web applications. It evaluates test quality, coverage, and automation to assess confidence in code changes. This audit answers a critical question:
TypeScript Code Quality Audit
This document provides a structured checklist and evaluation framework for performing a TypeScript code quality audit. It covers type safety, configuration, patterns, generics, and migration strategies.
Operations
6Operations audits covering deployment, monitoring, logging, and infrastructure reliability.
Data Integrity & Backup Audit
This document defines a framework-agnostic Data Integrity & Backup Audit for modern web applications. It evaluates data protection, consistency, and recoverability to ensure business continuity. This audit answers a critical question:
Database Health Audit
This document defines a framework-agnostic Database Health Audit for modern web applications. It evaluates database design, performance, and scalability to ensure reliable data layer operations. This audit answers a critical question:
DevOps & Deployment Audit
This document defines a framework-agnostic DevOps & Deployment Audit for modern web applications. It evaluates the reliability, automation, and safety of deployment processes. This audit answers a critical question:
Infrastructure Monitoring Audit
This document provides a structured checklist and evaluation framework for performing an infrastructure monitoring audit. It covers metrics collection, alerting, dashboards, and incident response.
Log Management Audit
This document provides a structured checklist and evaluation framework for performing a log management audit. It covers log collection, storage, analysis, and security.
Logging & Observability Audit
This document defines a framework-agnostic Logging & Observability Audit for modern web applications. It evaluates the ability to monitor, diagnose, and respond to issues in production. This audit answers a critical question:
User Experience
4UX audits evaluating usability, accessibility, design consistency, and user satisfaction.
Accessibility & Compliance Audit
This document defines a framework-agnostic Accessibility & Compliance Audit for modern web applications. It evaluates whether an application is usable by all users, including those with disabilities, and assesses legal compliance risks. This audit answers a critical question:
Mobile Responsiveness Audit
This document defines a framework-agnostic Mobile Responsiveness Audit for modern web applications. It evaluates cross-device compatibility and mobile user experience. This audit answers a critical question:
SEO & Discoverability Audit
This document defines a framework-agnostic SEO & Discoverability Audit for modern web applications. It evaluates search engine optimization and content findability. This audit answers a critical question:
User Experience (UX) Audit
This document defines a framework-agnostic User Experience Audit for modern web applications. It evaluates usability, efficiency, and satisfaction of real user interactions. This audit answers a critical question:
Integrations
10Integration audits reviewing third-party services, APIs, and external dependencies.
CRM Integration Audit
This document provides a structured checklist and evaluation framework for performing a CRM integration audit. It covers data synchronization, workflow automation, and system connectivity.
Crypto Wallet Integration Audit
A comprehensive audit of web3 wallet connections, transaction signing, and dApp-wallet interaction security.
Integration & API Health Audit
This document defines a framework-agnostic Integration & API Health Audit for modern web applications. It evaluates the reliability and maintainability of third-party connections and API dependencies. This audit answers a critical question:
Layer 2 / Rollup Integration Audit
A comprehensive audit of Layer 2 scaling solution implementations, bridges, and cross-layer communication.
LLM Integration Audit
This document provides a structured checklist and evaluation framework for performing an LLM integration audit. It covers API integration, prompt engineering, response handling, cost management, and safety considerations.
Mobile Backend API Integration Audit
This document provides a structured checklist and evaluation framework for auditing mobile app backend API integration patterns. It covers versioning, authentication, caching, and error handling.
Payment Gateway Integration Audit
This document provides a structured checklist and evaluation framework for performing a payment gateway integration audit. It covers Stripe, PayPal, and other processor integrations including error handling, webhook reliability, refund processing, and PCI compliance scope.
Stripe Integration Best Practices Audit
This document provides a structured checklist and evaluation framework for performing a Stripe integration best practices audit. It covers account configuration, integration quality, Stripe feature utilization, and compliance to ensure reliable payment processing and optimal use of Stripe capabilities.
Third-Party Integration Audit
This document provides a structured checklist and evaluation framework for performing a third-party integration audit. It covers API integrations, security, reliability, and maintenance.
Webhook Implementation Audit
This document provides a structured checklist and evaluation framework for performing a webhook implementation audit. It covers webhook design, security, reliability, and operations.
Compliance
14Regulatory compliance audits for GDPR, HIPAA, SOC2, PCI-DSS, and data privacy frameworks.
CCPA Consumer Privacy Audit
This document provides a structured checklist and evaluation framework for performing a CCPA (California Consumer Privacy Act) compliance audit. It covers consumer privacy rights, data collection disclosure requirements, and opt-out mechanisms for organizations processing California resident data.
Content Governance & Compliance Audit
This document provides a structured checklist and evaluation framework for auditing content governance, legal compliance, and accessibility. It covers content policies, regulatory requirements, and accessibility standards.
Cookie Consent & Tracking Audit
This document provides a structured checklist and evaluation framework for performing a cookie consent and tracking compliance audit. It covers cookie banners, consent management, analytics compliance, and third-party script governance under GDPR, CCPA, and ePrivacy regulations.
Data Retention & Deletion Audit
This document provides a structured checklist and evaluation framework for performing a data retention and deletion compliance audit. It covers retention policies, automated deletion procedures, archival practices, and legal hold management across organizational data stores.
GDPR Compliance Audit
This document provides a structured checklist and evaluation framework for performing a GDPR (General Data Protection Regulation) compliance audit. It covers data privacy, consent management, data subject rights, and cross-border transfer requirements for organizations processing EU citizen data.
HIPAA Technical Safeguards Audit
This document provides a structured checklist and evaluation framework for performing a HIPAA Technical Safeguards audit. It covers the technical controls required under the HIPAA Security Rule to protect electronic Protected Health Information (ePHI).
PCI-DSS Compliance Audit
This document provides a structured checklist and evaluation framework for performing a PCI-DSS (Payment Card Industry Data Security Standard) compliance audit. It covers the 12 requirements for protecting cardholder data and maintaining a secure payment environment.
Privacy Policy & Terms Audit
This document provides a structured checklist and evaluation framework for performing a privacy policy and terms of service audit. It covers policy completeness, legal accuracy, accessibility, and compliance with global privacy regulations.
Regional Compliance & Legal Audit
This document provides a structured checklist and evaluation framework for auditing regional legal compliance and market-specific requirements. It covers privacy regulations, local laws, and market entry requirements.
Regulatory Compliance Audit
This document provides a structured checklist and evaluation framework for performing a Regulatory Compliance audit. It covers industry regulations, compliance programs, documentation, and monitoring to ensure business operations meet applicable regulatory requirements.
SOC 2 Type II Readiness Audit
This document provides a structured checklist and evaluation framework for performing a SOC 2 Type II readiness audit. It covers the five Trust Services Criteria (TSC): Security, Availability, Processing Integrity, Confidentiality, and Privacy.
Software Licensing Compliance Audit
This document provides a structured checklist and evaluation framework for performing a software licensing compliance audit. It covers license inventory, usage compliance, open source obligations, and audit readiness to ensure proper software usage and minimize compliance risk.
Tax Compliance & Calculation Audit
This document provides a structured checklist and evaluation framework for performing a tax compliance and calculation audit. It covers tax configuration, calculation accuracy, reporting, and special scenarios to ensure proper tax collection and regulatory compliance across jurisdictions.
Terms of Service & Privacy Policy Audit
This document provides a structured checklist and evaluation framework for performing a Terms of Service and Privacy Policy audit. It covers legal document completeness, regulatory compliance, enforceability, and jurisdiction-specific requirements to ensure website legal documents protect the business and meet regulatory requirements.
E-Commerce
5E-commerce audits covering checkout flows, payments, inventory, and online store operations.
E-Commerce Checkout Flow Audit
This document provides a structured checklist and evaluation framework for performing an e-commerce checkout flow audit. It covers cart functionality, checkout UX, abandonment risks, payment integration, and mobile checkout optimization.
Inventory & Order Management Audit
This document provides a structured checklist and evaluation framework for performing an inventory and order management audit. It covers stock tracking, overselling prevention, order lifecycle management, and fulfillment processes.
Pricing & Promotions Audit
This document provides a structured checklist and evaluation framework for performing a pricing and promotions audit. It covers price accuracy, discount logic, coupon security, promotional display, and pricing strategy implementation.
Product Catalog & Search Audit
This document provides a structured checklist and evaluation framework for performing a product catalog and search audit. It covers product data quality, search relevance, filtering capabilities, and faceted navigation.
Shipping & Tax Calculation Audit
This document provides a structured checklist and evaluation framework for performing a shipping and tax calculation audit. It covers shipping rate accuracy, tax compliance, international shipping, and address validation.
Cloud & Infrastructure
5Cloud infrastructure audits for AWS, Azure, GCP, containers, and serverless architectures.
AWS Infrastructure Audit
This document provides a structured checklist and evaluation framework for performing an AWS infrastructure audit. It covers IAM security, VPC configuration, S3 bucket security, EC2 best practices, CloudWatch monitoring, and cost optimization.
Disaster Recovery & Business Continuity Audit
This document provides a structured checklist and evaluation framework for performing a disaster recovery and business continuity audit. It covers RTO/RPO definitions, failover procedures, backup testing, and runbook completeness.
Infrastructure as Code Audit
This document provides a structured checklist and evaluation framework for performing an Infrastructure as Code (IaC) audit. It covers Terraform/CDK quality, state management, drift detection, secrets handling, and IaC best practices.
Infrastructure Automation Audit
This document provides a structured checklist and evaluation framework for performing an infrastructure automation audit. It covers Infrastructure as Code, configuration management, and automation practices.
Load Balancer & Scaling Audit
This document provides a structured checklist and evaluation framework for performing a load balancer and scaling audit. It covers ALB/NLB configuration, auto-scaling policies, health checks, SSL termination, and high availability.
Frontend & JavaScript
7Frontend framework audits for React, Vue, Angular, Node.js, and modern JavaScript applications.
Browser Compatibility Audit
This document provides a structured checklist and evaluation framework for performing a browser compatibility audit. It covers cross-browser testing, polyfills, CSS compatibility, progressive enhancement, and graceful degradation.
Frontend Build & Bundle Audit
This document provides a structured checklist and evaluation framework for performing a frontend build and bundle audit. It covers Webpack/Vite configuration, bundle optimization, code splitting, tree shaking, and build performance.
Next.js Application Audit
This document provides a structured checklist and evaluation framework for performing a Next.js application audit. It covers SSR/SSG strategies, API routes, image optimization, ISR, middleware, and App Router patterns.
Node.js Backend Audit
This document provides a structured checklist and evaluation framework for performing a Node.js backend audit. It covers Express/Fastify patterns, async handling, security practices, clustering, and Node.js best practices.
React Application Audit
This document provides a structured checklist and evaluation framework for performing a React application audit. It covers component architecture, state management, hooks usage, performance optimization, and testing practices.
React Native Application Audit
This document provides a structured checklist and evaluation framework for performing a React Native application audit. It covers cross-platform code quality, native integration, performance, and deployment.
Vue.js Application Audit
This document provides a structured checklist and evaluation framework for performing a Vue.js application audit. It covers Composition API usage, state management with Pinia, routing, SSR considerations, and Vue 3 best practices.
WordPress & CMS
5CMS audits for WordPress security, performance, plugins, and headless CMS architectures.
Content Migration Audit
This document provides a structured checklist and evaluation framework for performing a content migration audit. It covers migration planning, data mapping, content transformation, validation, and rollback procedures.
Editorial Workflow Audit
This document provides a structured checklist and evaluation framework for performing an editorial workflow audit. It covers content creation, review processes, publishing workflows, and team collaboration.
Headless CMS Audit
This document provides a structured checklist and evaluation framework for performing a headless CMS audit. It covers API design, content modeling, frontend integration, performance, and security considerations.
WordPress Plugin Audit
This document provides a structured checklist and evaluation framework for performing a WordPress plugin audit. It covers plugin architecture, hooks system, database interactions, security, and WordPress plugin standards.
WordPress Theme Audit
This document provides a structured checklist and evaluation framework for performing a WordPress theme audit. It covers theme structure, template hierarchy, performance, security, and WordPress coding standards.
AI & Modern Tech
6Emerging technology audits for AI/ML integration, LLMs, chatbots, and RAG systems.
AI Chatbot Audit
This document provides a structured checklist and evaluation framework for performing an AI chatbot audit. It covers conversation design, NLU quality, integration, user experience, and safety considerations.
AI Ethics & Governance Audit
This document provides a structured checklist and evaluation framework for performing an AI ethics and governance audit. It covers ethical AI principles, governance frameworks, transparency, accountability, and regulatory compliance.
AI/ML Model Audit
This document provides a structured checklist and evaluation framework for performing an AI/ML model audit. It covers model development, training data, evaluation, deployment, and monitoring considerations.
RAG System Audit
This document provides a structured checklist and evaluation framework for performing a Retrieval-Augmented Generation (RAG) system audit. It covers document processing, embedding strategy, retrieval quality, generation, and system reliability.
Voice Interface Audit
This document provides a structured checklist and evaluation framework for performing a voice interface audit. It covers voice UX design, speech recognition, natural language processing, and privacy.
VR/AR Application Audit
This document provides a structured checklist and evaluation framework for performing a VR/AR application audit. It covers user experience, performance, safety, and platform compliance.
Business Process
8Business process audits for user journeys, conversion funnels, onboarding, and analytics.
Agile Practices Audit
This document provides a structured checklist and evaluation framework for performing an agile practices audit. It covers Scrum/Kanban implementation, team dynamics, and continuous improvement.
Analytics & Tracking Audit
This document provides a structured checklist and evaluation framework for performing an analytics and tracking audit. It covers data collection, event tracking, reporting, attribution, and privacy compliance.
Change Management Audit
This document provides a structured checklist and evaluation framework for performing a change management audit. It covers change processes, risk assessment, approval workflows, and rollback procedures.
Conversion Funnel Audit
This document provides a structured checklist and evaluation framework for performing a conversion funnel audit. It covers funnel stages, drop-off analysis, optimization opportunities, and conversion rate optimization practices.
Customer Support System Audit
This document provides a structured checklist and evaluation framework for performing a customer support system audit. It covers support channels, ticket management, self-service, SLAs, and customer satisfaction.
Email & Notification System Audit
This document provides a structured checklist and evaluation framework for performing an email and notification system audit. It covers transactional emails, marketing automation, push notifications, deliverability, and user preferences.
User Onboarding Flow Audit
This document provides a structured checklist and evaluation framework for performing a user onboarding flow audit. It covers signup process, activation, user education, retention hooks, and success metrics.
Vendor Management Audit
This document provides a structured checklist and evaluation framework for performing a vendor management audit. It covers vendor selection, contract management, performance monitoring, and risk assessment.
Data & Database
7Database audits covering schema design, data integrity, backup strategies, query optimization, and data lifecycle management.
Data Pipeline Audit
This document provides a structured checklist and evaluation framework for performing a data pipeline audit. It covers architecture, reliability, monitoring, and data quality.
Data Warehouse Audit
This document provides a structured checklist and evaluation framework for performing a data warehouse audit. It covers architecture, data modeling, performance, and governance.
IoT Data Pipeline Audit
A comprehensive audit of IoT telemetry ingestion, processing, and analytics infrastructure.
MongoDB Database Audit
This document provides a structured checklist and evaluation framework for performing a MongoDB database audit. It covers schema design, indexing, security, and operational practices.
MySQL Database Audit
This document provides a structured checklist and evaluation framework for performing a MySQL database audit. It covers configuration, performance, security, and operational practices.
PostgreSQL Database Audit
This document provides a structured checklist and evaluation framework for performing a PostgreSQL database audit. It covers configuration, performance, security, and operational practices.
Redis Database Audit
This document provides a structured checklist and evaluation framework for performing a Redis database audit. It covers configuration, memory management, security, and operational practices.
API & Microservices
3API audits for design patterns, versioning, documentation, rate limiting, service mesh, and contract testing.
API Documentation Audit
This document provides a structured checklist and evaluation framework for auditing API documentation quality and completeness. It covers OpenAPI specs, developer experience, and documentation accuracy.
GraphQL API Audit
This document provides a structured checklist and evaluation framework for performing a GraphQL API audit. It covers schema design, security, performance, and developer experience.
REST API Design Audit
This document provides a structured checklist and evaluation framework for performing a REST API design audit. It covers API design principles, security, documentation, and developer experience.
DevOps & CI/CD
5DevOps audits covering pipeline efficiency, deployment automation, environment parity, release management, and feature flags.
CI/CD Pipeline Audit
This document provides a structured checklist and evaluation framework for performing a CI/CD pipeline audit. It covers build processes, testing automation, deployment strategies, security, and reliability.
Docker Environment Audit
This document provides a structured checklist and evaluation framework for performing a Docker environment audit. It covers image management, container configuration, security, and operational practices.
Mobile Release & Deployment Audit
This document provides a structured checklist and evaluation framework for auditing mobile release processes and deployment practices. It covers build automation, code signing, staged rollouts, and monitoring.
Release Management Audit
This document provides a structured checklist and evaluation framework for performing a release management audit. It covers release processes, versioning, deployment strategies, and rollback procedures.
SaaS Feature Flagging & Entitlements Audit
This document provides a structured checklist and evaluation framework for auditing feature access control and entitlement management. It covers feature flags, plan-based gating, and rollout strategies.
Vendor & Third-Party Risk
4Vendor risk audits for SLA compliance, dependency audits, supply chain security, and vendor security posture assessment.
Employment & Contractor Agreement Audit
This document provides a structured checklist and evaluation framework for performing an Employment and Contractor Agreement audit. It covers employment agreements, contractor documentation, worker classification, and compliance documentation to ensure proper workforce documentation and minimize misclassification risk.
Third-Party Privacy Risk Audit
A comprehensive audit of vendor privacy practices, data processor agreements, and third-party risk management.
Translation Management System (TMS) Audit
This document provides a structured checklist and evaluation framework for auditing translation management systems and workflows. It covers TMS configuration, workflow automation, and vendor management.
Vendor Contract Management Audit
This document provides a structured checklist and evaluation framework for performing a Vendor Contract Management audit. It covers contract inventory, risk assessment, performance management, and contract terms to ensure effective vendor relationship management and risk mitigation.
Disaster Recovery & Business Continuity
1DR/BC audits covering backup verification, RTO/RPO compliance, failover testing, and incident response playbooks.
Disaster Recovery Audit
This document provides a structured checklist and evaluation framework for performing a disaster recovery audit. It covers DR planning, backup strategies, recovery procedures, and testing.
Mobile Applications
8Mobile app audits for iOS/Android guidelines, app store compliance, offline sync, push notifications, and deep linking.
Android Application Audit
This document provides a structured checklist and evaluation framework for performing an Android application audit. It covers Kotlin/Java code quality, Play Store guidelines, security, and performance.
App Store Optimization (ASO) Audit
This document provides a structured checklist and evaluation framework for performing an App Store Optimization audit. It covers metadata, visuals, ratings, and discoverability across iOS App Store and Google Play Store.
Flutter Application Audit
This document provides a structured checklist and evaluation framework for performing a Flutter application audit. It covers Dart code quality, widget architecture, platform integration, and performance.
iOS Application Audit
This document provides a structured checklist and evaluation framework for performing an iOS application audit. It covers Swift/SwiftUI code quality, App Store guidelines, security, and performance.
Mobile App Analytics & Attribution Audit
This document provides a structured checklist and evaluation framework for auditing mobile analytics implementation and marketing attribution. It covers SDK integration, event tracking, attribution providers, and privacy compliance.
Mobile In-App Purchase & Monetization Audit
This document provides a structured checklist and evaluation framework for auditing in-app purchases, subscriptions, and revenue integrity. It covers store integration, receipt validation, and billing compliance.
Mobile Offline & Sync Audit
This document provides a structured checklist and evaluation framework for auditing offline-first architecture and data synchronization. It covers local storage, conflict resolution, and sync reliability.
Mobile Push Notification Audit
This document provides a structured checklist and evaluation framework for auditing push notification implementation and engagement. It covers permission handling, notification delivery, and user experience.
SaaS & Subscription
13SaaS platform audits covering multi-tenancy, billing integration, usage metering, churn prevention, and onboarding flows.
Multi-Currency & International Billing Audit
This document provides a structured checklist and evaluation framework for performing a multi-currency and international billing audit. It covers currency configuration, pricing strategy, international payments, and tax compliance to ensure reliable global revenue operations.
Payment Reconciliation & Settlement Audit
This document provides a structured checklist and evaluation framework for performing a payment reconciliation and settlement audit. It covers daily reconciliation processes, settlement accuracy, exception management, and month-end close procedures to ensure financial records match actual cash flows.
Revenue Recognition & Billing Accuracy Audit
This document provides a structured checklist and evaluation framework for performing a revenue recognition and billing accuracy audit. It covers billing configuration, revenue recognition compliance, invoice accuracy, and billing system integration to ensure financial accuracy and regulatory compliance.
SaaS Agreement Review Audit
This document provides a structured checklist and evaluation framework for performing a SaaS Agreement Review audit. It covers subscription terms, service levels, data handling, and customer protections to ensure SaaS agreements are balanced and protective for both providers and customers.
SaaS Customer Health & Success Audit
This document provides a structured checklist and evaluation framework for auditing customer health scoring and success management. It covers health indicators, risk prediction, and proactive engagement strategies.
SaaS Data Portability & Export Audit
This document provides a structured checklist and evaluation framework for auditing data export capabilities and portability compliance. It covers data export formats, API access, and regulatory compliance.
SaaS Onboarding & Activation Audit
This document provides a structured checklist and evaluation framework for auditing user onboarding flows and activation metrics. It covers signup experience, first-time user experience, and time-to-value optimization.
SaaS Subscription Lifecycle Audit
This document provides a structured checklist and evaluation framework for auditing subscription management and billing lifecycle. It covers plan management, upgrades/downgrades, cancellation, and revenue operations.
SaaS Usage Metering & Billing Audit
This document provides a structured checklist and evaluation framework for auditing usage-based billing and metering systems. It covers event collection, aggregation, and billing integration.
SaaS User Provisioning & SSO Audit
This document provides a structured checklist and evaluation framework for auditing enterprise user management and SSO integration. It covers SCIM, SAML, OAuth/OIDC, and directory synchronization.
Subscription & Recurring Billing Audit
This document provides a structured checklist and evaluation framework for performing a subscription and recurring billing audit. It covers subscription lifecycle management, billing cycles, dunning, upgrades/downgrades, and proration handling.
Subscription Billing & Dunning Audit
This document provides a structured checklist and evaluation framework for performing a subscription billing and dunning audit. It covers subscription lifecycle management, dunning configuration, payment method management, and churn metrics to maximize revenue retention and minimize involuntary churn.
SaaS Application Audit (Enhanced)
Comprehensive SaaS platform assessment using maturity model scoring. Evaluates multi-tenancy, billing, scalability, and operational excellence across CMMI maturity levels.
Content & SEO
7Content and SEO audits for content strategy, technical SEO, schema markup, Core Web Vitals, and crawlability.
Content Quality & E-E-A-T Audit
This document provides a structured checklist and evaluation framework for auditing content quality and E-E-A-T signals. It covers Experience, Expertise, Authoritativeness, and Trustworthiness.
Content Strategy & Planning Audit
This document provides a structured checklist and evaluation framework for auditing content strategy and editorial planning. It covers content pillars, editorial calendars, and content governance.
Link Building & Off-Page SEO Audit
This document provides a structured checklist and evaluation framework for auditing link building strategies and backlink profile health. It covers link acquisition, competitor analysis, and link quality assessment.
Local SEO Audit
This document provides a structured checklist and evaluation framework for auditing local search optimization. It covers Google Business Profile, local citations, reviews, and local content strategy.
Multilingual SEO Audit
This document provides a structured checklist and evaluation framework for auditing multilingual and multi-regional SEO. It covers hreflang implementation, international targeting, and localized content optimization.
On-Page SEO Audit
This document provides a structured checklist and evaluation framework for auditing on-page SEO elements. It covers meta tags, content optimization, heading structure, and keyword implementation.
Technical SEO Audit
This document provides a structured checklist and evaluation framework for auditing technical SEO implementation. It covers crawlability, indexability, site architecture, and Core Web Vitals.
Localization & i18n
3Internationalization audits covering translation workflows, RTL support, date/currency formatting, and cultural adaptation.
Content Localization Audit
This document provides a structured checklist and evaluation framework for auditing content localization quality and processes. It covers translation quality, cultural adaptation, and content parity.
Locale Formatting & Standards Audit
This document provides a structured checklist and evaluation framework for auditing locale-specific formatting and data standards. It covers date/time, numbers, currency, and address formatting across regions.
RTL & Bidirectional Text Audit
This document provides a structured checklist and evaluation framework for auditing right-to-left (RTL) language support and bidirectional text handling. It covers layout mirroring, text direction, and mixed-content scenarios.
Documentation & Knowledge
6Documentation audits for code docs, API documentation, runbooks, knowledge base accuracy, and onboarding materials.
Developer Documentation Audit
This document provides a structured checklist and evaluation framework for auditing developer-focused documentation. It covers code documentation, SDK guides, and developer experience.
Documentation Metrics & Analytics Audit
This document provides a structured checklist and evaluation framework for auditing documentation measurement and optimization. It covers analytics setup, performance metrics, and continuous improvement.
Documentation Tooling & Platform Audit
This document provides a structured checklist and evaluation framework for auditing documentation tools and platforms. It covers authoring tools, publishing platforms, and workflow automation.
Internal Documentation Audit
This document provides a structured checklist and evaluation framework for auditing internal documentation and team knowledge. It covers runbooks, wikis, and operational documentation.
Technical Writing Standards Audit
This document provides a structured checklist and evaluation framework for auditing technical writing quality and standards. It covers style guides, consistency, and documentation best practices.
User Documentation & Help Center Audit
This document provides a structured checklist and evaluation framework for auditing user-facing documentation and help resources. It covers help centers, knowledge bases, and end-user guides.
Blockchain & Web3
6Web3 audits covering smart contract security, wallet integration, gas optimization, and decentralization patterns.
Blockchain & Smart Contract Audit
This document provides a structured checklist and evaluation framework for performing a blockchain and smart contract audit. It covers smart contract security, blockchain architecture, and operational practices.
Blockchain Node Operations Audit
A comprehensive audit of self-hosted blockchain node infrastructure, RPC endpoints, and validator security.
Cross-chain Interoperability Audit
A comprehensive audit of cross-chain bridges, interoperability protocols, and multi-chain asset management.
DAO Governance Audit
A comprehensive audit of decentralized autonomous organization governance mechanisms, voting systems, and treasury management.
NFT Platform Audit
A comprehensive audit of NFT minting, marketplace, metadata systems, and smart contract implementations for ERC-721 and ERC-1155 tokens.
Token Economics Audit
A comprehensive audit of token distribution, vesting schedules, staking mechanisms, and economic model sustainability.
IoT & Edge Computing
6IoT audits for device security, firmware updates, edge processing, and connectivity resilience.
Edge Computing Audit
This document provides a structured checklist and evaluation framework for performing an edge computing audit. It covers edge architecture, deployment, security, and operations.
Edge Computing Platform Audit
A comprehensive security audit of edge computing infrastructure, workloads, and edge-to-cloud communication.
IoT Communication Protocol Audit
A comprehensive security audit of IoT messaging protocols including MQTT, CoAP, and related communication security.
IoT Firmware Update Audit
A comprehensive audit of over-the-air (OTA) update mechanisms and firmware lifecycle security.
IoT Fleet Management Audit
A comprehensive audit of large-scale IoT device fleet operations, provisioning, and lifecycle management.
Real-Time Systems Audit
This document provides a structured checklist and evaluation framework for performing a real-time systems audit. It covers latency requirements, message delivery, scalability, and reliability.
Privacy Engineering
8Privacy-focused audits covering data minimization, consent management, anonymization, and privacy by design principles.
Consent Management Audit
A comprehensive audit of consent collection, storage, and management systems for GDPR and privacy compliance.
Cross-Border Data Transfer Audit
A comprehensive audit of international data transfers, transfer mechanisms, and compliance with data localization requirements.
Data Anonymization & Pseudonymization Audit
A comprehensive audit of data de-identification techniques, anonymization effectiveness, and re-identification risk assessment.
Data Subject Rights (DSAR) Audit
A comprehensive audit of data subject access request handling and privacy rights fulfillment processes.
PII Discovery & Classification Audit
A comprehensive audit of personal data discovery, classification, and data mapping processes.
Privacy by Design Audit
| Check | Status | Score | Notes |
|---|---|---|---|
| Purposes clearly defined | ⬜ | ||
| Purpose binding enforced | ⬜ | ||
| Secondary use requires consent | ⬜ | ||
| Compatible use assessment | ⬜ | ||
| No function creep | ⬜ | ||
| Purpose documented in code | ⬜ | ||
| Data segregation by purpose | ⬜ |
A comprehensive audit of privacy-by-design principles implementation throughout the software development lifecycle.
Privacy Impact Assessment (PIA/DPIA) Audit
A comprehensive audit of privacy impact assessment processes, methodology, and integration with project lifecycles.
Privacy-Preserving Analytics Audit
A comprehensive audit of analytics implementations that protect user privacy while providing business insights.
Financial & Billing
4Financial audits for revenue recognition, payment processing accuracy, reconciliation, and fraud prevention.
Accounts Receivable & Collections Audit
This document provides a structured checklist and evaluation framework for performing an accounts receivable and collections audit. It covers invoice delivery, payment terms, collection processes, and AR performance to optimize cash flow and minimize bad debt.
Financial Reporting & Analytics Audit
This document provides a structured checklist and evaluation framework for performing a financial reporting and analytics audit. It covers revenue reporting, cash flow analysis, KPI accuracy, and report integrity to ensure financial data supports accurate decision-making.
Fraud Prevention & Risk Management Audit
This document provides a structured checklist and evaluation framework for performing a fraud prevention and risk management audit. It covers fraud detection rules, transaction monitoring, account security, and dispute management to protect revenue and prevent financial losses.
Refund & Credit Management Audit
This document provides a structured checklist and evaluation framework for performing a refund and credit management audit. It covers refund policy compliance, processing procedures, credit management, and abuse prevention to ensure controlled refund operations while maintaining customer satisfaction.
Legal & Contract
4Legal audits covering license compliance, terms of service, data processing agreements, and IP protection.
Data Processing Agreement (DPA) Audit
This document provides a structured checklist and evaluation framework for performing a Data Processing Agreement audit. It covers GDPR Article 28 requirements, security measures, data subject rights, and termination provisions to ensure DPAs meet regulatory requirements and protect personal data appropriately.
Intellectual Property Protection Audit
This document provides a structured checklist and evaluation framework for performing an Intellectual Property Protection audit. It covers IP inventory, protection measures, third-party IP compliance, and enforcement to ensure business intellectual property is properly protected and managed.
Master Service Agreement (MSA) Audit
This document provides a structured checklist and evaluation framework for performing a Master Service Agreement audit. It covers core terms, liability provisions, intellectual property, and compliance requirements to ensure contracts provide adequate protection while remaining commercially reasonable.
Partnership & Reseller Agreement Audit
This document provides a structured checklist and evaluation framework for performing a Partnership and Reseller Agreement audit. It covers partner terms, revenue sharing, obligations, and relationship management to ensure partnership agreements are clear, fair, and protective.
Marketing Technology
3Marketing technology audits covering tag management, marketing automation, CRM integration, A/B testing, and personalization.
Marketing Automation Audit
This document provides a structured checklist and evaluation framework for performing a marketing automation audit. It covers platform utilization, campaign management, lead scoring, and integration.
Personalization Strategy Audit
This document provides a structured checklist and evaluation framework for performing a personalization strategy audit. It covers data collection, segmentation, content delivery, and measurement.
Tag Management Audit
This document provides a structured checklist and evaluation framework for performing a tag management audit. It covers tag implementation, governance, performance, and data quality.
HIPAA Compliance
9HIPAA compliance audits for healthcare organizations covering PHI protection, technical safeguards, administrative controls, physical security, and breach management.
HIPAA Administrative Safeguards Audit
This document provides a structured checklist and evaluation framework for performing a HIPAA Administrative Safeguards audit. It covers the administrative actions, policies, and procedures required under the HIPAA Security Rule to manage the selection, development, implementation, and maintenance of security measures.
HIPAA Audit Readiness Assessment
This document provides a structured checklist and evaluation framework for performing a HIPAA Audit Readiness assessment. It evaluates an organization's preparedness for an OCR (Office for Civil Rights) HIPAA compliance audit, covering documentation, evidence, and response procedures.
HIPAA Breach Notification Audit
This document provides a structured checklist and evaluation framework for performing a HIPAA Breach Notification audit. It covers the requirements for identifying, assessing, and notifying breaches of unsecured PHI under the HIPAA Breach Notification Rule (45 CFR §§ 164.400-414).
HIPAA Business Associate Agreement Audit
This document provides a structured checklist and evaluation framework for performing a HIPAA Business Associate Agreement (BAA) audit. It covers the requirements for establishing and maintaining compliant business associate relationships under the HIPAA Privacy and Security Rules.
HIPAA PHI Inventory & Data Flow Audit
This document provides a structured checklist and evaluation framework for performing a HIPAA PHI Inventory and Data Flow audit. It covers the identification, classification, and tracking of Protected Health Information throughout the organization to support risk analysis and compliance efforts.
HIPAA Physical Safeguards Audit
This document provides a structured checklist and evaluation framework for performing a HIPAA Physical Safeguards audit. It covers the physical measures, policies, and procedures required under the HIPAA Security Rule to protect electronic information systems and related buildings and equipment.
HIPAA Privacy Rule Compliance Audit
This document provides a structured checklist and evaluation framework for performing a HIPAA Privacy Rule Compliance audit. It covers the requirements for protecting individually identifiable health information and ensuring patient rights under 45 CFR Part 160 and Subparts A and E of Part 164.
HIPAA Risk Analysis Audit
This document provides a structured checklist and evaluation framework for performing a HIPAA Risk Analysis audit. It evaluates the organization's compliance with the HIPAA Security Rule requirement to conduct an accurate and thorough assessment of potential risks and vulnerabilities to ePHI (45 CFR § 164.308(a)(1)(ii)(A)).
HIPAA Training & Awareness Audit
This document provides a structured checklist and evaluation framework for performing a HIPAA Training and Awareness audit. It covers the workforce training requirements under both the HIPAA Privacy Rule (§ 164.530(b)) and Security Rule (§ 164.308(a)(5)) to ensure all workforce members understand their responsibilities for protecting PHI.
When Audits Are Performed
Discovery
Evaluate existing systems before starting a project. Know what you're working with.
Build Validation
Verify quality at key milestones during development.
Pre-Launch
Comprehensive audit before going live. Catch issues before users do.
Periodic Review
Regular health checks to ensure systems stay secure and performant.
Discovery
Evaluate existing systems before starting a project. Know what you're working with.
Build Validation
Verify quality at key milestones during development.
Pre-Launch
Comprehensive audit before going live. Catch issues before users do.
Periodic Review
Regular health checks to ensure systems stay secure and performant.
What You Receive
Every audit produces a professional report visible in your client portal. You see the scores, understand the findings, and have a clear path forward.
- Executive summary for stakeholders
- Detailed findings with evidence
- Prioritized recommendations
- Portal access for tracking remediation
Sample Audit Scores
See how your system scores
Start with a discovery audit. We'll evaluate your system and give you a clear picture of where things stand.