> ## Documentation Index
> Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Audit Logs

> Immutable, searchable audit trails tracking all user actions, security policy modifications, and scan executions.

Snapsec maintains an append-only, tamper-evident audit trail for regulatory compliance (SOC 2, ISO 27001, HIPAA, PCI DSS).

***

## Logged Event Categories

* **Authentication**: Logins, logouts, failed login attempts, MFA challenges, SSO configuration changes.
* **User & Access Changes**: Role modifications, user invitations, deactivations, API key creations and deletions.
* **Scan & Pentest Operations**: Assessment creations, cancellations, scope edits, scan profile modifications.
* **Vulnerability Governance**: Status transitions (Active -> Resolved), risk acceptance approvals, blocker requests.
* **System Administration**: License renewals, integration token updates, data retention policy alterations.

***

## Exporting & SIEM Forwarding

Audit logs can be streamed in real time via Syslog (CEF / RFC 5424) or webhook to external SIEM/SOAR platforms (Splunk, Datadog, Elastic, Microsoft Sentinel).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.