CLI Reference

scan - Run compliance scan

auditkit scan [options]

Common options:

-provider - Cloud provider: aws, azure, gcp (default: aws)
-framework - Framework: soc2, pci, cmmc, hipaa, 800-53, all (default: all)
-format - Output format: text, json, html, pdf (default: text)
-output - Output file path (default: stdout)
-verbose - Show detailed output

Examples:

# Basic scan
auditkit scan

# SOC2 scan with PDF report
auditkit scan -framework soc2 -format pdf -output report.pdf

# Azure PCI-DSS scan
auditkit scan -provider azure -framework pci -verbose

# All frameworks, JSON output
auditkit scan -framework all -format json -output results.json

fix - Generate remediation script

auditkit fix -output fixes.sh

Generates shell script with commands to fix failed controls.

Note: Always review the script before running it.

progress - Show compliance improvement

auditkit progress

Shows compliance score trends over time.

compare - Compare last two scans

auditkit compare

Shows what changed between the last two scans.

version - Show version

auditkit version

Displays AuditKit version and build information.

evidence-package - Generate C3PAO-ready evidence

auditkit-pro evidence-package -framework cmmc -output ./evidence

Creates ZIP file with organized evidence for auditors.

Multi-account scanning

# Scan AWS Organization
auditkit-pro scan -provider aws --scan-all

# Scan with custom concurrency
auditkit-pro scan --scan-all --max-concurrent 10

# Summary only
auditkit-pro scan --scan-all --summary-only

Initial assessment

# 1. Run scan
auditkit scan -framework cmmc -verbose

# 2. Generate PDF for stakeholders
auditkit scan -framework cmmc -format pdf -output cmmc-report.pdf

# 3. Generate fix script
auditkit fix -output fixes.sh

# 4. Review and run fixes
cat fixes.sh
bash fixes.sh

# 5. Re-scan to verify
auditkit scan -framework cmmc

Continuous monitoring

# Daily scan in CI/CD
auditkit scan -format json -output results.json

# Check compliance threshold
SCORE=$(jq '.score' results.json)
if (( $(echo "$SCORE < 80" | bc -l) )); then
  echo "Compliance dropped below 80%"
  exit 1
fi

Main Commands