ManifestoProductsValuesContact
Say Hello →
All products
OpenAuditModel logoSTABLE

OpenAuditModel: One audit model for every application.

OpenAuditModel is an open specification for audit events in business applications. It defines what an audit event is — not where it is stored, how it is transported, or which regulation it satisfies — in a shape a validator can check.

Visit openauditmodel.org Source code

// HIGHLIGHTS

  • Seven required fields

    Spec version, id, time, event, actor, resource and application. Everything else is optional context.

  • Validate offline

    One npx command validates an event, lints it for secrets and personal data, or checks it against a profile.

  • Domain profiles

    10 profiles and 127 rules — identity and access, finance, incidents, message brokers and more. Profiles only add requirements.

  • Adopt without migrating

    Start with an export mapper from your existing audit store to OpenAuditModel NDJSON. Storage stays where it is.

// AT A GLANCE

Status
v1.0 stable — not yet proven in production
License
Apache 2.0
Tooling
CLI (Node.js 22+) · MCP server
Scope
Event model only — not storage, a SIEM or a compliance guarantee