AuditForge - Sell Project

AuditForge 1.6 is a complete and extensively documented website-audit SaaS source-code package built for authorized technical audits of DNS-verified domains.The platform performs real HTTP requests and Chromium-based website crawling, executes JavaScript, analyzes desktop and mobile versions, captures real screenshots, and produces evidence-backed findings. It does not generate fabricated scores, simulated scans, demo findings, or placeholder reports.AuditForge includes 80 fixed audit rules covering crawlability, search optimization, content quality, accessibility, security, performance, user experience, and technical reliability. When evidence is unavailable, the platform records an explicit unavailable or unknown state instead of inventing a result.Core audit capabilities include:• Mandatory DNS TXT domain ownership verification• Ownership revalidation before scans and worker execution• Real HTTP crawling and JavaScript rendering through Chromium• Separate desktop and mobile browser profiles• SSRF-safe networking, DNS pinning, and verified-host boundaries• robots.txt and sitemap processing• Detection of crawl traps, unsafe URLs, redirects, and access challenges• Real screenshots with SHA-256 integrity verification• Measured page, resource, layout, accessibility, and performance evidence• 80 evidence-backed technical audit rules• Structured-data and JSON-LD validation• Optional Google PageSpeed Insights and Lighthouse evidence• Declarative workspace custom assertions and data extractions• PDF and JSON report generation• Historical scan storage and before-and-after comparisons• Explicit detection of blocked or incomplete audit coverageThe platform also includes an authenticated URL Explorer with server-side filtering, sorting, pagination, saved workspace views, and full CSV and JSON exports.AuditForge supports recurring website monitoring at hourly, six-hourly, daily, and weekly intervals. Monitor events can detect score regressions, recoveries, failed scans, removed pages, issue changes, and periods without material changes. Alert thresholds can be configured by severity, score reduction, page removal, and issue changes.Notifications can be delivered through Resend email, signed generic webhooks, Slack-compatible endpoints, and Microsoft Teams-compatible endpoints when the buyer connects valid provider accounts and public destinations.The SaaS workspace includes:• Account registration, login, logout, and persistent sessions• Email verification and password-reset workflows• TOTP multi-factor authentication• One-time MFA recovery codes• Session listing and revocation• Account-data export• Organizations and organization switching• Team invitations and member roles• Organization audit logs• Starter, Pro, and Business subscription plans• Server-enforced audit, page, and member limits• Stripe Checkout, Billing Portal, and signed webhook handling• Support requests and an administrative support workflow• Platform administration views• Operator-configured legal pages and legal-readiness gatesFor local or single-server operation, AuditForge includes a SQLite-based control plane and durable local queue. For distributed execution, the project includes a PostgreSQL lease queue, transactional outbox, worker heartbeats, bounded retries, cancellation handling, stale-lease recovery, and support for workers running on multiple hosts.Audit evidence can be stored locally or in S3-compatible object storage. Object writes are immutable, signed, checksum-verified, and scoped to the corresponding scan. Runtime secrets can be supplied directly by an external secret manager or stored in encrypted envelopes using AES-GCM or AWS KMS.Deployment and operational materials include:• Local and distributed Docker Compose configurations• Separate API and worker Dockerfiles• Caddy HTTPS configuration• PostgreSQL schema and queue infrastructure• S3-compatible object-storage support• Protected Prometheus metrics and alert rules• Structured application logging• Production preflight checks• Backup, restore, and expired-data cleanup tools• Distributed smoke tests and load-testing tools• Security, threat-model, recovery, and operations documentation• Detailed German installation and deployment documentationAuditForge 1.6 additionally contains a reproducible million-scale reference runtime and a controlled six-part proof suite.Included scale evidence covers:• A complete synthetic one-million-page persistent pipeline• A synthetic ten-million-URL disk-backed frontier benchmark• Ten million real local HTTP/1.1 response cycles• Ten million real Chromium DOM, style, and layout cycles• Execution of all 80 audit rules through checksum-verified evidence shards• Persistent robots.txt, crawl-delay, concurrency, and lease coordination across 100,000 virtual hosts• 10,000 S3-compatible objects and independently verified AWS Signature Version 4 requests• A reproducible infrastructure cost model based on measured inputs and explicit pricing assumptionsThese controlled proofs are not represented as a crawl of ten million external websites. They also do not claim ten million independent website navigations, a completed real PostgreSQL cluster benchmark, or an actual cloud-provider invoice. These limitations are documented clearly in the included validation reports.The included release validation records:• 155 successfully syntax-checked JavaScript modules• 144 automated tests• 141 passed tests• 0 failed tests• 3 skipped Chromium navigation integration tests due to an administrative browser policy in the validation environment• SHA-256 integrity verification for the complete source packageAuditForge is currently pre-revenue and has not been publicly launched. It has no existing customers, users, traffic, or revenue.The buyer receives:• Complete AuditForge 1.6 source code• Website interface and administrative workspace• Logo and included brand assets• Audit, crawler, reporting, monitoring, and scale-runtime modules• Docker and distributed deployment configurations• Automated tests and validation reports• Reproducible proof artifacts• Setup, security, operations, backup, and deployment documentation• Technical handover materialsThe buyer must connect and maintain their own domain, hosting infrastructure, PostgreSQL database, object storage, Stripe account, Resend account, Google PageSpeed API access if required, email domain, monitoring infrastructure, provider credentials, and legal or business information.The sale includes seven calendar days of limited handover assistance for questions about the existing source code, setup process, and included documentation. It does not include ongoing maintenance, hosting, infrastructure operation, new feature development, custom modifications, or unlimited technical support.