Skip to main content
Snapsec maintains an append-only, tamper-evident audit trail for regulatory compliance (SOC 2, ISO 27001, HIPAA, PCI DSS).

​
Logged Event Categories

  • Authentication: Logins, logouts, failed login attempts, MFA challenges, SSO configuration changes.
  • User & Access Changes: Role modifications, user invitations, deactivations, API key creations and deletions.
  • Scan & Pentest Operations: Assessment creations, cancellations, scope edits, scan profile modifications.
  • Vulnerability Governance: Status transitions (Active -> Resolved), risk acceptance approvals, blocker requests.
  • System Administration: License renewals, integration token updates, data retention policy alterations.

​
Exporting & SIEM Forwarding

Audit logs can be streamed in real time via Syslog (CEF / RFC 5424) or webhook to external SIEM/SOAR platforms (Splunk, Datadog, Elastic, Microsoft Sentinel).