Immutable, tenant-scoped audit trails that close enterprise deals. Stop spending weeks building custom logging infrastructure. Open-source SDK with optional managed cloud.
import { AuditKit } from '@auditkit/sdk';
const audit = new AuditKit({
apiKey: process.env.AUDITKIT_API_KEY!,
});
await audit.log('document.updated', {
actor: { id: 'user_123', name: 'Jane Doe' },
target: { type: 'document', id: 'doc_456' },
tenantId: 'org_acme',
});Open Source
AGPLv3 licensed
Tamper-Evident
SHA-256 hash chaining
< 5 min setup
npm install to production
SOC 2 Ready
Compliance exports included
Every B2B SaaS team hits the same wall. Here's what you're signing up for when you build it yourself.
2-4 weeks
Schema design, hash chaining, tenant isolation, search indexing, export pipelines. That's before you write a single test.
Every quarter
SOC 2 auditors come back every year. New formats, new requirements, new exports. The maintenance never stops.
Deals blocked
"Do you have immutable audit trails?" If the answer is no, your deal sits in security review for weeks.
AuditKit handles all of this with a single SDK.
Edit the fields, hit Send Event, and watch the tamper-evident audit log build in real time.
await audit.log('document.updated', {
actor: { id: 'user_123', name: 'Jane Doe' },
target: { type: 'document', id: 'doc_456' },
tenantId: 'org_acme',
});No events yet
Edit the fields and click Send Event to see the audit log populate.
npm install @auditkit/sdkFrom zero to enterprise-grade audit trails in under 5 minutes.
One package. Zero config. Works with Node, Python, Go, and Ruby.
$ npm install @auditkit/sdkFive lines of code. Tamper-evident from the first event.
await audit.log('user.login', {
actor: { id: 'usr_1' },
tenantId: 'org_acme',
});Embed our pre-built viewer in your app. Tenant-scoped by default so each customer sees only their own events.
<AuditKitViewer
tenantId="org_acme"
token={jwt}
/>Auditors, customers, security teams, compliance officers. AuditKit is designed for all of them.
Every event is SHA-256 hash-chained to the previous one, creating a cryptographic chain of custody that proves no records have been altered. Merkle tree verification lets auditors validate the entire log mathematically.
const proof = await audit.verify('evt_789');
// => {
// valid: true,
// hashChain: "unbroken",
// merkleRoot: "a1b2c3..."
// }Tenant-scoped by default. Each customer sees only their own events. Embed the pre-built viewer directly in your app with a single React component or iframe.
Webhooks fire on every event. SIEM streaming pushes to Splunk, Datadog, and S3 in real time. Built-in anomaly detection flags suspicious patterns before they become incidents.
{
"type": "anomaly.detected",
"severity": "high",
"reason": "Bulk export from new IP",
"actor": "user_123",
"tenant": "org_acme"
}const report = await audit.export({
format: 'pdf',
standard: 'ocsf',
range: 'last-quarter',
tenantId: 'org_acme',
});
// => SOC 2 evidence PDF readyOne-click exports in CSV, JSON, and PDF. Industry-standard OCSF and CEF formats. Generate SOC 2 evidence packages that auditors actually accept.
The only tool that's open source, managed, self-hostable, and cryptographically immutable.
| Feature | AuditKit | WorkOS | Pangea | Retraced | Custom Build |
|---|---|---|---|---|---|
| Open source | — | — | |||
| Managed cloud | — | — | |||
| Tamper-proof (hash chain) | — | — | — | ||
| Merkle tree proofs | — | — | — | ||
| Tenant-scoped access | — | ||||
| Embeddable viewer | — | — | |||
| SIEM streaming | — | — | |||
| Multi-language SDKs | — | — | |||
| Self-hostable | — | — | |||
| GraphQL API | — | — | — | — | |
| AI anomaly detection | — | — | — | — | |
| Setup time | 5 min | 1 day | 2 hrs | 1 week | 2-4 weeks |
| Price (100K events) | $39/mo | $99+/mo | Contact | Free | Dev time |
Start free. Scale as you grow.
5K events/mo
30-day retention · 50K lifetime cap
100K events/mo
90-day retention
500K events/mo
1-year retention
5M events/mo
7-year retention
From secure document sharing to AI-powered operations, teams choose AuditKit to handle the compliance work they'd rather not build.
“We needed tamper-proof audit trails for every document view, download, and watermark event. AuditKit gave us enterprise-grade logging in an afternoon — would have taken us weeks to build the hash-chaining alone.”
“Our enterprise customers asked for full audit visibility into every crawl, every report, every user action. AuditKit’s tenant-scoped logs and embeddable viewer meant we could ship that feature same-day instead of next quarter.”
“When you’re handling SOPs and sensitive operational data, you need an immutable record of who accessed what and when. AuditKit’s SIEM streaming and compliance exports made our SOC 2 prep painless.”
Your enterprise customers need audit trail access. Ship it today, not next quarter.