AuditForge - Sell Project

AuditForge 1.6 is a complete and extensively documented website-audit SaaS source-code package built for authorized technical audits of DNS-verified domains. The platform performs real HTTP requests and Chromium-based website crawling, executes JavaScript, analyzes desktop and mobile versions, captures real screenshots, and produces evidence-backed findings. It does not generate fabricated scores, simulated scans, demo findings, or placeholder reports. AuditForge includes 80 fixed audit rules covering crawlability, search optimization, content quality, accessibility, security, performance, user experience, and technical reliability. When evidence is unavailable, the platform records an explicit unavailable or unknown state instead of inventing a result. Core audit capabilities include: • Mandatory DNS TXT domain ownership verification • Ownership revalidation before scans and worker execution • Real HTTP crawling and JavaScript rendering through Chromium • Separate desktop and mobile browser profiles • SSRF-safe networking, DNS pinning, and verified-host boundaries • robots.txt and sitemap processing • Detection of crawl traps, unsafe URLs, redirects, and access challenges • Real screenshots with SHA-256 integrity verification • Measured page, resource, layout, accessibility, and performance evidence • 80 evidence-backed technical audit rules • Structured-data and JSON-LD validation • Optional Google PageSpeed Insights and Lighthouse evidence • Declarative workspace custom assertions and data extractions • PDF and JSON report generation • Historical scan storage and before-and-after comparisons • Explicit detection of blocked or incomplete audit coverage The platform also includes an authenticated URL Explorer with server-side filtering, sorting, pagination, saved workspace views, and full CSV and JSON exports. AuditForge supports recurring website monitoring at hourly, six-hourly, daily, and weekly intervals. Monitor events can detect score regressions, recoveries, failed scans, removed pages, issue changes, and periods without material changes. Alert thresholds can be configured by severity, score reduction, page removal, and issue changes. Notifications can be delivered through Resend email, signed generic webhooks, Slack-compatible endpoints, and Microsoft Teams-compatible endpoints when the buyer connects valid provider accounts and public destinations. The SaaS workspace includes: • Account registration, login, logout, and persistent sessions • Email verification and password-reset workflows • TOTP multi-factor authentication • One-time MFA recovery codes • Session listing and revocation • Account-data export • Organizations and organization switching • Team invitations and member roles • Organization audit logs • Starter, Pro, and Business subscription plans • Server-enforced audit, page, and member limits • Stripe Checkout, Billing Portal, and signed webhook handling • Support requests and an administrative support workflow • Platform administration views • Operator-configured legal pages and legal-readiness gates For local or single-server operation, AuditForge includes a SQLite-based control plane and durable local queue. For distributed execution, the project includes a PostgreSQL lease queue, transactional outbox, worker heartbeats, bounded retries, cancellation handling, stale-lease recovery, and support for workers running on multiple hosts. Audit evidence can be stored locally or in S3-compatible object storage. Object writes are immutable, signed, checksum-verified, and scoped to the corresponding scan. Runtime secrets can be supplied directly by an external secret manager or stored in encrypted envelopes using AES-GCM or AWS KMS. Deployment and operational materials include: • Local and distributed Docker Compose configurations • Separate API and worker Dockerfiles • Caddy HTTPS configuration • PostgreSQL schema and queue infrastructure • S3-compatible object-storage support • Protected Prometheus metrics and alert rules • Structured application logging • Production preflight checks • Backup, restore, and expired-data cleanup tools • Distributed smoke tests and load-testing tools • Security, threat-model, recovery, and operations documentation • Detailed German installation and deployment documentation AuditForge 1.6 additionally contains a reproducible million-scale reference runtime and a controlled six-part proof suite. Included scale evidence covers: • A complete synthetic one-million-page persistent pipeline • A synthetic ten-million-URL disk-backed frontier benchmark • Ten million real local HTTP/1.1 response cycles • Ten million real Chromium DOM, style, and layout cycles • Execution of all 80 audit rules through checksum-verified evidence shards • Persistent robots.txt, crawl-delay, concurrency, and lease coordination across 100,000 virtual hosts • 10,000 S3-compatible objects and independently verified AWS Signature Version 4 requests • A reproducible infrastructure cost model base...