Skip to content

Infrastructure security,
from discovery to remediation

SecAudit Platform is an on-prem workspace for infrastructure security audits. Discover hosts with AuditFlow, run compliance checks, remediate findings, and verify the results

View on GitHub Try the demo

Capabilities

On-prem security operations
in one workspace

For security teams managing Linux, Windows, and network devices

Checks and profiles

Import profiles and run scheduled audits with live logs

AuditFlow Discovery

Scan network ranges, identify hosts, and match each host to the right profile

Network device audits

Audit switches and routers, then generate vendor-specific remediation commands for review

Reports and trends

Export reports, compare runs, and track compliance over time

Remediation workflow

Turn failed checks into remediation jobs, then re-audit to verify the changes

Enterprise security

SSO, object-level access control, encrypted credentials, and an audit trail of key actions

Platform UI

Built for security workflows

Screens from the SecAudit console — posture overview, guided audits, live job monitoring, and executive reporting

Overview and posture

secaudit.local/dashboard
Live Operations
Dashboard showing compliance KPIs and recent job runs

Dashboard

Operations dashboard with compliance KPIs, the status of running jobs, and recent run results

View details
secaudit.local/overview
Posture Overview
Platform overview showing pass/fail rates and trend charts

Platform Overview

Track inventory and job trends with pass/fail rates and date filters

View details

Audit and automation

secaudit.local/audit-flow
Discovery Wizard
AuditFlow wizard showing network discovery and profile matching

AuditFlow Discovery

Scan network ranges, identify hosts, and match each host to a baseline profile

View details
secaudit.local/jobs
Operations Center
Operations Center showing compliance jobs and target selection

Operations Center

Select target hosts, launch compliance jobs, and monitor execution in real time

View details
secaudit.local/console
Interactive Console
Interactive console showing the command editor and live output

Interactive Console

Run ad hoc checks with an embedded editor and live command output

View details
secaudit.local/profiles
Profile Catalog
Profile catalog showing imported profiles, filters, and versions

Profile Catalog

Browse imported and custom profiles by category and version, then edit them in one click

View details

Analytics and reports

secaudit.local/trends
Trend Analytics
Operations analytics showing pass/fail trends and summary metrics

Operations Analytics

Track pass/fail trends over time and filter results by date and scope

View details
secaudit.local/reports
Executive Reports
Executive reports showing export formats, schedules, and run history

Executive Reports

Schedule HTML or PDF delivery, export CSV on demand, review run history, and compare results across audits

View details

Technology and trust

On-prem architecture
designed for controlled deployment

Five layers from the operator UI to managed systems — reliable job delivery, encrypted secrets, and full observability

Security teams SecAudit Platform Infrastructure
  1. 01

    Access layer

    Operators work in a single PatternFly interface with Keycloak OIDC or local authentication and object-level RBAC

    View layer
  2. 02

    Control plane

    FastAPI provides REST and WebSocket APIs. secaudit_core manages profiles, AuditFlow, jobs, and reports

    View layer
  3. 03

    Data and messaging

    PostgreSQL stores platform state. Redis Sentinel provides highly available queues, distributed locks, and scheduling

    View layer
  4. 04

    Execution layer

    Celery workers execute checks, remediation jobs, discovery scans, and scheduled tasks while streaming logs in real time

    View layer
  5. 05

    Managed targets

    Agentless SSH, WinRM, and network protocols connect to Linux, Windows, and network devices

    View layer

Stays in your perimeter

Deploy with Compose or Helm on your servers — keep operational data in your perimeter by default

Jobs can be recovered

Delivery failures retry automatically, and stalled jobs can be recovered

Secrets stay locked

Encrypted credentials, object-level access control, and an audit trail of key actions

See every run

Metrics, traces, and operator dashboards help you monitor every run and investigate failures

Ready to audit
your infrastructure?

Deploy SecAudit on your own servers with Docker Compose for labs or Helm for production. Source code is on GitHub under Polyform Noncommercial 1.0.0

View on GitHub Try the demo