Disclaimer

auditthis.ai publishes an audit method, a reference register, and 2 prompts. It is not an audit service, a certification, or an attestation.

What the site does and does not do

• The assessment is run by whoever uses the prompts, with their own AI assistant, against their own project. The site runs no code of yours, stores no project data, and accepts no uploads.
• Nothing here makes a project compliant, secure, or complete. The vocabulary throughout is assess, verify, find, remediate, and demonstrate, and every status in a report rests on the evidence the assistant captured or is labelled as untested.
• The site reproduces no text from any reference. It links to each source, and each source's own licence governs its use; see licensing.
• Nothing on this site authorizes an assistant to probe a live system, clone a source, or use a licensed framework copy. The planning prompt asks the owner for each authorization.

What the pages load and run

The pages as published load this site's own stylesheet, images, and 1 script of this project's own, the few lines that power the copy buttons on the prompt pages. They set no cookies. Cloudflare, which serves the site, adds its own scripts to every page: its default protections and browser-issue reporting, and its Web Analytics beacon, which counts visits without cookies so that the maintainer can see how many people use the site. The site's Content-Security-Policy allows those Cloudflare scripts and nothing else from outside this site. Nothing of this project's collects, stores, or transmits anything about you.

Licence

The content and code of this site and of the auditthis.ai project are dedicated to the public domain under CC0 1.0, except the AIQT Guardrails material listed in the project's .aiqt/PIN, which is licensed under the Apache License 2.0. Jeff Posluns' other projects carry their own licensing terms. The current version of the prompts and the method is in VERSION.

About the author

Jeff Posluns has spent more than 30 years in technology and security. He built this method from that experience and maintains it with his own AI tooling and automated checks. More at posluns.ca and on LinkedIn. Related projects: Secure Config · GRC Library · AIQT Guardrails · Clean Language · GitHub.