Audit Catalog

Adversarially-tested audit prompts for AI-built projects. Run them in your coding tool, get structured results, submit for benchmarking.

Start here — run your Stack Scan

Detects your tech stack so AuditBuffet can recommend the right audits and benchmark your results.

Run Stack Scan

Showing 103 of 116 audits

SaaS

10 audits

API Design AuditAPI design quality assessment covering naming consistency, HTTP semantics, request/response shape, security controls, and developer experience.

22 checksPro

API Security AuditComprehensive security audit for REST and GraphQL APIs, covering authentication, authorization, input validation, and protection against OWASP API Top 10 threats.

24 checksPro

Authentication AuditProduction-ready authentication assessment covering session management, login flow security, password handling, and OAuth integrations.

28 checksPro

Authorization AuditAuthorization layer assessment covering access control, resource authorization, API permissions, and admin boundary enforcement.

22 checksPro

Billing & Payments AuditSecure payment and billing assessment covering payment security, subscription management, pricing enforcement, and customer billing experience.

22 checksPro

Database Design & Operations AuditEvaluates database schema design, query patterns, migration safety, access control, backup strategy, and operational monitoring for SQL databases.

28 checksPro

Error Handling AuditError handling assessment covering exception handling, error reporting, user-facing error messages, and graceful degradation patterns.

20 checksPro

Logging & Monitoring AuditApplication logging and monitoring assessment covering activity logging, health monitoring, audit trails, and observability signals.

20 checksPro

Multi-Tenancy AuditMulti-tenant data isolation assessment covering tenant boundary enforcement across all layers and safe shared resource management.

20 checksPro

Onboarding UX AuditNew user guidance assessment covering signup flow, first-run experience, activation, and onboarding effectiveness.

20 checksPro

AI App

6 audits

AI Chat Visibility AuditUI/UX quality assessment for AI chat interfaces, covering response streaming, loading states, error communication, conversation history, and input handling polish.

20 checksPro

AI Data Privacy AuditData handling assessment across the AI processing pipeline, covering storage, retention, PII protection, and user control over third-party model data sharing.

20 checksPro

AI Prompt Injection AuditSafety assessment against prompt injection attacks, identifying vulnerabilities where untrusted user input might cause the AI to ignore instructions or exfiltrate data.

22 checksPro

AI Response Quality AuditQuality and trustworthiness assessment of AI-generated responses, including output formatting, context grounding, and communication of uncertainty or knowledge gaps.

20 checksPro

AI Token Optimization AuditToken management and cost-efficiency patterns to prevent unexpected API bills, covering context growth, token limits, and efficient streaming and caching implementation.

21 checksPro

AI UX Patterns AuditAI-specific interaction conventions assessment covering regeneration controls, feedback mechanisms, and advanced patterns that distinguish polished AI interfaces from basic API wrappers.

22 checksPro

Marketing Site

7 audits

Analytics & Tracking AuditAnalytics and tracking implementation assessment covering setup correctness, conversion-critical event tracking, and privacy-respecting data collection.

22 checksPro

Content Quality AuditMarketing site content quality assessment covering language clarity, structure, value proposition, and visitor messaging completeness.

22 checksPro

Conversion Optimization AuditConversion optimization assessment covering CTA effectiveness, form design, trust signals, and conversion infrastructure quality.

24 checksPro

Local SEO AuditLocal SEO readiness assessment covering local schema, NAP consistency, business information, and local relevance signals.

17 checksPro

Marketing SEO AuditAdvanced SEO signals assessment covering structured data, content optimization, and technical SEO factors that separate adequate sites from ones that rank.

24 checksPro

Page Speed AuditDeep performance analysis for marketing sites, covering Core Web Vitals, resource optimization, and loading strategy impact on bounce rate and conversion.

24 checksPro

Social Sharing AuditSocial sharing infrastructure assessment covering Open Graph metadata, platform-specific cards, and sharing mechanics for content appearance.

20 checksPro

E-Commerce

7 audits

Cart & Checkout UX AuditEvaluates shopping cart persistence, item management UX, checkout flow efficiency, form handling, and order clarity across desktop and mobile devices.

20 checksPro

Catalog & Product Logic AuditValidates product data model integrity, variant/option handling, pricing logic correctness, inventory tracking accuracy, and product discoverability through search and filters.

20 checksPro

Order Management AuditValidates order state machine transitions, status tracking and history, cancellation and refund flows, notification triggers at each lifecycle stage, and admin order management capabilities.

20 checksPro

Payment Security AuditEvaluates code-level payment implementation security covering Stripe/payment provider SDK usage, client-side tokenization, webhook verification, fraud prevention patterns, and payment error handling.

24 checksPro

PCI Compliance AuditAssesses infrastructure and compliance posture for cardholder data environments including network segmentation, access controls, encryption, vulnerability management, and PCI DSS monitoring alignment.

22 checksPro

Reviews & Social Proof AuditValidates review collection UX, display patterns, content moderation practices, and schema markup for aggregate ratings to build trust without compromising data integrity.

20 checksPro

Shipping & Tax AuditValidates shipping rate calculation accuracy, delivery estimation, tax computation (sales tax/VAT), regional compliance, and tax transparency in checkout and order confirmation.

18 checksPro

Chrome Extension

4 audits

Chrome Web Store Readiness AuditAssesses store listing completeness, policy compliance, screenshot quality, update strategy, and review preparation for Chrome Web Store submission.

18 checksPro

Extension Data Privacy AuditAssesses data collection practices, privacy disclosures, storage security, third-party data sharing, and compliance with browser store privacy requirements.

20 checksPro

Extension Permissions & Security AuditEvaluates manifest permissions scope, content security policy, content script isolation, message passing security, and host permission minimization to ensure the principle of least privilege.

22 checksPro

Extension UX & Performance AuditEvaluates popup responsiveness, badge/notification usage, loading states, extension bundle size, memory usage, and integration with browser UX conventions.

20 checksPro

Mobile

5 audits

App Store Readiness AuditChecks app icons, splash screens, app metadata, build configuration, version management, and store guideline compliance.

22 checksPro

Mobile Navigation & Deep Linking AuditAssesses React Navigation setup, deep link handling, universal/app links, back button behavior, and navigation state persistence.

20 checksPro

Mobile Offline & Storage AuditValidates local data persistence, offline-first patterns, data synchronization, cache management, and secure storage mechanisms.

20 checksPro

Mobile Permissions & Privacy AuditEvaluates runtime permission requests, privacy manifest compliance, data handling disclosures, and permission graceful degradation.

22 checksPro

Mobile UX Patterns AuditEvaluates touch targets, safe areas, keyboard handling, platform-specific conventions, gestures, and responsive layout for varying screen sizes.

20 checksPro

Directory & Listing

4 audits

Listing Data & Schema AuditEvaluates structured data markup, data model quality, image handling, data freshness signals, and content completeness.

20 checksPro

Map & Location Integration AuditEvaluates map component implementation, geocoding, marker management, location-based search, and directions/routing.

18 checksPro

Search & Discovery UX AuditEvaluates search implementation quality, filter/facet UX, sorting, pagination, URL-synced state, and empty state handling.

22 checksPro

User Submissions & Moderation AuditEvaluates submission forms, moderation workflow, spam prevention, claim/edit flows, and content policies.

18 checksPro

Booking & Scheduling

3 audits

Booking Flow & Lifecycle AuditEvaluates booking creation, double-booking prevention, modification, cancellation, waitlists, and payment integration.

22 checksPro

Booking Notifications & Reminders AuditEvaluates confirmation emails, SMS notifications, calendar invites, reminder scheduling, and rescheduling communication.

20 checksPro

Calendar & Availability AuditEvaluates calendar display quality, availability management, timezone handling, and recurring schedule support for booking systems.

20 checksPro

Community Platform

4 audits

Community Privacy & Controls AuditAssesses profile visibility settings, content privacy, data export, account deletion, consent management, and user control over their data.

20 checksPro

Content Moderation & Safety AuditEvaluates user-generated content moderation, spam prevention, report/block systems, content policies, and abuse detection mechanisms.

21 checksPro

Real-Time Communication AuditEvaluates WebSocket/SSE implementation, message delivery reliability, presence indicators, connection handling, and real-time UX.

20 checksPro

Social Features & Engagement AuditAssesses user profiles, follow/connection systems, activity feeds, notification management, and engagement patterns.

20 checksPro

Government

4 audits

CMMC Level 1 Readiness AuditEvaluates code-level controls aligned with CMMC Level 1 (FAR 52.204-21) — access control, identification and authentication, system protection, communications security, and information integrity for projects handling Federal Contract Information (FCI).

21 checksPro

FISMA/FedRAMP Readiness AuditEvaluates frontend security controls aligned with NIST 800-53, authentication strength, audit logging, continuous monitoring readiness, and incident response documentation.

20 checksPro

Government Web Standards AuditEvaluates 21st Century IDEA Act compliance, plain language usage, required pages and links, USWDS pattern alignment, and digital analytics readiness.

18 checksPro

Section 508 Accessibility AuditEvaluates WCAG 2.1 AA compliance, Section 508 E-series requirements, assistive technology compatibility, document accessibility, and VPAT readiness for government web applications.

22 checksPro

Financial Services

5 audits

Financial Audit Trail AuditEvaluates immutable transaction logging, balance reconciliation, regulatory retention compliance, tamper evidence, and audit report generation.

20 checksPro

Financial Data Encryption AuditEvaluates data-at-rest and data-in-transit encryption, key management, certificate handling, algorithm selection, and PCI-DSS encryption requirements.

20 checksPro

Financial Form Validation AuditEvaluates currency and amount input validation, account number format enforcement, calculation accuracy, rounding rules, and financial math edge cases.

20 checksPro

Regulatory Disclosure AuditEvaluates fee transparency, APR and rate disclosures, terms presentation, consumer protection notices, and regulatory compliance content.

18 checksPro

Session Security AuditEvaluates session inactivity timeouts, step-up authentication for sensitive operations, concurrent session controls, session fixation prevention, and device trust.

20 checksPro

App Store (iOS & Android)

5 audits

App Store IAP & Subscriptions AuditAudits in-app purchase and subscription implementations across iOS and Android — covering StoreKit 2, Play Billing Library, receipt validation, paywall compliance, and subscription lifecycle management.

23 checksPro

App Store Metadata & Listing AuditAudits your App Store and Google Play listing metadata — descriptions, screenshots, review notes, compliance declarations, and platform-specific submission requirements.

22 checksPro

App Store Policy & Content Compliance AuditEvaluates whether your mobile app meets Apple App Store and Google Play Store content and policy requirements — including app quality, content restrictions, regulated industries, and platform standards.

19 checksPro

App Store Privacy & Data Compliance AuditAudits iOS and Android apps for privacy manifest completeness, tracking consent, data handling practices, and children's data compliance to prevent store rejections and policy violations.

26 checksPro

App Store Review Blockers AuditDetects the specific technical and policy issues that cause Apple App Store and Google Play Store reviewers to reject app submissions.

27 checksPro

Email Campaign Systems

8 audits

Campaign Analytics & Attribution AuditAudits open/click tracking implementation, A/B testing infrastructure with statistical rigor, multi-touch attribution models, and reporting pipeline reliability for email campaign systems.

19 checksPro

Campaign Orchestration & Sequencing AuditAudits the campaign brain — sequence and drip architecture, cadence and spacing rules, reply and engagement detection, lead scoring, and CRM routing for email campaign systems.

21 checksPro

Compliance & Consent Engine AuditAudits the engineering of compliance systems — consent storage schema, opt-out processing pipeline, GDPR/CCPA data subject rights implementation, and compliance audit trails for email campaign platforms.

20 checksPro

Data Quality & List Hygiene AuditValidates email address quality, deduplication logic, data freshness management, and suppression list architecture for email campaign systems.

23 checksPro

Data Sourcing & Provenance AuditAudits how contact data enters the system — from scraping, APIs, purchased lists, form submissions, and referrals. Validates provenance tracking, legal sourcing practices, and ingestion pipeline reliability.

21 checksPro

Deliverability Engineering AuditComprehensive deliverability audit covering DNS authentication (SPF, DKIM, DMARC), IP/domain warm-up automation, sending reputation management, ISP-specific throttling, and bounce/feedback loop processing for email campaign systems.

24 checksPro

Operational Resilience (Email) AuditAudits monitoring, alerting, failure recovery, capacity planning, and incident response for email campaign systems — covers ESP failover, queue resilience, database backups, and deliverability incident runbooks.

19 checksPro

Sending Pipeline & Infrastructure AuditAudits email sending infrastructure including queue architecture, ESP integration patterns, template rendering security, retry strategies, and failure isolation for campaign systems.

23 checksPro

Security

6 audits

Data Protection AuditGDPR and privacy compliance review covering data collection, consent mechanisms, retention policies, and PII handling.

22 checksPro

Dependency & Supply Chain AuditThird-party dependency assessment covering security vulnerabilities, maintenance health, and license compliance.

22 checksPro

Environment Security AuditDeep inspection of environment variable handling, secrets storage patterns, and runtime configuration security.

18 checksPro

Infrastructure Hardening AuditContainer, Kubernetes, and network security review covering image hardening, RBAC, network policies, and supply chain integrity.

26 checksPro

Security Hardening AuditComprehensive security review covering auth, data validation, secrets management, transport security, and error handling.

34 checksPro

Security Headers II AuditAdvanced security header configuration quality — evaluates whether headers are configured correctly, not just present. Sequel to Security Headers & Basics.

26 checksPro

Performance

2 audits

Performance Core AuditCore Web Vitals-focused performance review covering loading, rendering, image optimization, and resource hints.

26 checksPro

Performance Deep Dive AuditAdvanced performance analysis covering bundle composition, caching strategy, runtime bottlenecks, and third-party script impact.

32 checksPro

Accessibility

2 audits

Accessibility Basics AuditFoundational accessibility audit covering ARIA usage, color contrast, keyboard navigation, and screen reader compatibility.

28 checksPro

Accessibility WCAG Compliance AuditFull WCAG 2.1 AA compliance review with 36 checks across perceivability, operability, understandability, and robustness.

36 checksPro

SEO

1 audit

Advanced SEO AuditTechnical SEO deep dive covering Core Web Vitals impact, JavaScript rendering, international SEO, and advanced structured data.

30 checksPro

Pre-Launch

4 audits

Deployment Readiness AuditPre-launch deployment checklist covering CI/CD pipeline health, monitoring setup, rollback strategy, and production configuration.

20 checksPro

Error Resilience AuditError boundary coverage, structured logging, graceful degradation patterns, and external dependency failure handling.

24 checksPro

Goal Alignment AuditRequirements-to-implementation comparison revealing feature gaps, scope creep, and mismatches between original specifications and what was built.

8 checksPro

Pre-Launch Checklist AuditProduction readiness checklist covering infrastructure, legal compliance, user-facing essentials, monitoring, and backup verification.

28 checksPro

Privacy Compliance

4 audits

CCPA/CPRA Readiness AuditCalifornia Consumer Privacy Act and California Privacy Rights Act compliance covering consumer rights, privacy disclosures, opt-out mechanisms, and data handling practices.

20 checksPro

Cookie & Consent Compliance AuditCookie consent requirements under ePrivacy Directive and emerging US expectations covering banner UX, consent enforcement, cookie classification, and transparency.

18 checksPro

COPPA Compliance AuditChildren's Online Privacy Protection Act compliance covering age determination, parental consent, data minimization for children, and operator obligations.

18 checksPro

GDPR Readiness AuditEU General Data Protection Regulation compliance covering lawful basis, user rights (DSAR), consent management, data processing agreements, and breach accountability.

22 checksPro

Communications Compliance

4 audits

Email & SMS Compliance AuditCAN-SPAM Act and TCPA compliance for commercial emails and text messages covering unsubscribe mechanisms, sender identity, consent, and content delivery rules.

20 checksPro

FTC Consumer Protection AuditFTC consumer protection rules covering truthful advertising, endorsement disclosures, dark pattern prevention, and AI transparency practices.

20 checksPro

Subscription & Auto-Renewal Compliance AuditFTC click-to-cancel rule and state auto-renewal law compliance covering pre-purchase disclosure, enrollment consent, cancellation mechanisms, and renewal notifications.

18 checksPro

Terms of Service & Legal Pages AuditFoundational legal page compliance covering required legal pages, content clarity, and accessibility requirements for every web application.

16 checksPro

Developer Tooling

6 audits

API Design AuditEvaluates API design quality — naming conventions, schema contracts, versioning strategy, and developer ergonomics for REST, GraphQL, and gRPC APIs.

24 checksPro

CLI Quality AuditEvaluates command-line interface quality — command structure, help text, exit codes, error handling, I/O conventions, and distribution readiness.

24 checksPro

Developer Documentation AuditEvaluates consumer-facing developer documentation — README quality, API reference completeness, code examples, and maintenance practices.

24 checksPro

MCP Server AuditEvaluates MCP server implementations — tool definitions, transport protocol compliance, error handling, security boundaries, and capability negotiation.

27 checksPro

Plugin / Extension Architecture AuditEvaluates plugin and extension system quality — hook lifecycle, isolation boundaries, versioning contracts, and documentation for plugin authors.

25 checksPro

SDK / Package Quality AuditEvaluates the quality of published SDK and npm packages — exports configuration, type safety, tree-shaking, bundle size, documentation, and semver compliance.

25 checksPro

Other

2 audits

Code Maintainability AuditStructural maintainability assessment of your codebase — how easily a developer can understand, modify, and extend the project.

24 checksPro

Code Quality Essentials AuditTypeScript strictness, test coverage, dependency health, and common anti-pattern detection for AI-generated codebases.

30 checksPro