AuditKitDev
Open-source tamper-proof audit logging for B2B SaaS applications.
Subscription2,645 impressions#23 of its week
Open-source audit logging with SHA-256 hash chaining and SOC 2 compliance tools for B2B SaaS.
- for
- B2B SaaS developers, security/compliance teams, auditors.
- pricing
- paid · free trial
- license
- open source
Key features
- Hash-chained audit logs — SHA-256 hash chaining and Merkle proofs create immutable, cryptographically verifiable trails.
- Multi-language SDKs — One SDK works with Node, Python, Go and Ruby for easy event logging.
- Embeddable React viewer — Tenant-scoped React component lets customers view their own audit trail inside your app.
- SOC 2 control catalog & policy templates — 51 controls, 15 ready-made policies and one-click evidence exports in CSV/JSON/PDF.
- Real-time alerts & SIEM streaming — HMAC-signed webhooks and streaming to Splunk, Datadog or S3 with AI anomaly detection.
- Compliance exports & evidence vault — Export audit evidence in OCSF/CEF formats and store tamper-proof files with digital signatures.
Use cases
- Generate immutable audit trails for document access and user actions.
- Provide auditors with cryptographic proof of log integrity during SOC 2 audits.
- Stream audit events to SIEM tools like Splunk or Datadog for security monitoring.
- Automate SOC 2 evidence collection and policy compliance for SaaS products.
AuditKitDev FAQ
How do I start using AuditKit?+
Install the SDK with npm (or the equivalent package for Python, Go, Ruby), log an event with a few lines of code, and embed the React viewer in your app.
Is AuditKit open source?+
Yes, it is released under the AGPLv3 license and can be self-hosted.
What compliance standards does AuditKit support?+
It includes a SOC 2 control catalog with 51 controls, 15 policy templates, and can export evidence in OCSF and CEF formats.
Can AuditKit integrate with my existing SIEM?+
AuditKit provides HMAC-signed webhooks and streaming integrations for Splunk, Datadog and Amazon S3.
How is tamper-proofness achieved?+
Each event’s SHA-256 hash incorporates the previous hash, forming a Merkle tree that auditors can verify mathematically.
What retention options are available?+
Retention ranges from 90 days on the Starter plan up to 7 years on the Supersize plan.
Summarized by DevHunt from auditkit.dev · Oct 8, 2026. Details may change; check the official site.
