.png&w=256&q=75)
🤝 Top Collaborators
🤓 Latest Submissions
AuditForge
Enterprise AI deployments are moving fast, but the systems those agents touch — codebases, APIs, databases — are still audited manually, slowly, and inconsistently. AuditForge changes that. AuditForge is a multi-agent compliance audit platform built on Google Gemini. Security teams upload their artifacts — a codebase, an OpenAPI spec, a database schema, a cloud config — and AuditForge dispatches specialized Gemini agents to analyze them against OWASP API Top 10, HIPAA Technical Safeguards, and SOC2 Common Criteria. Gemini's long-context window is the core advantage: rather than scanning files in isolation, the analysis agent reads an entire codebase at once, catching cross-file vulnerabilities that line-by-line tools miss entirely. Every finding is standardized — severity, evidence with the exact file and line, AI-generated remediation with a code example, and a direct mapping to the compliance clause it violates. When the audit is ready to hand off, AuditForge generates a cryptographically signed PDF report that maps every issue to its regulatory reference — the kind of document a CISO or external auditor can act on without a translator. Adding support for new system types — Terraform, Kubernetes, CI/CD pipelines — requires only a new connector module; the policy engine and report layer need no changes. Every action is recorded in a tamper-evident, cryptographically chained audit trail, making the audit of the audit verifiable too. The frontend runs natively on desktop and in the browser from a single Kotlin Multiplatform codebase. Server-Sent Events stream findings in real time as the scan runs. AuditForge makes compliance auditing something engineers can run themselves, security teams can trust, and regulators can read.
19 May 2026
