Nuevo
Security Audit Evidence
40 security checks, access inventory, evidence pack: SOC 2, ISO 27001, HIPAA.
Funciona con
Support
Desarrollador
Pablo Simón
About this app
Check your account's security configuration against 40 controls, inventory who has access and what sends data out, see what changed since the last run, and give your auditor an evidence pack (printable report, snapshot, SHA-256 hashes), from inside Support and without anything leaving your account.
About the developer
Built and supported by Pablo Simón, an independent developer in Ireland, maker of Help Center Doctor and Data Custodian. Not affiliated with or endorsed by Zendesk.
What the app does, by area
Authentication: two-factor required and who has not enrolled, sign-in policy, session timeouts, IP restrictions, SSO, Google or Microsoft sign-in.
Access and roles: number of admins, people inactive for 90 days, suspended people with a role, custom roles with sensitive permissions, empty groups, light agents.
Integrations: third-party apps, webhooks without HTTPS or authentication, legacy targets, OAuth clients and stale tokens, API tokens before their 2027 retirement, rules that notify external endpoints.
Data and privacy: deletion schedules, attachment authentication and link expiry, agent ticket deletion, sandbox, attachments in e-mails, basic-auth access to the API.
E-mail: SPF, DKIM, domain verification and forwarding of every support address on your own domains.
Help center: publishing permissions and public help centers.
Logging: audit log availability, long-lived sessions, and a baseline snapshot so drift is visible on every plan.
Each control shows its criterion, result, remedy and Admin Center page. Score 0–100 weighted by severity; findings can be accepted with a reason kept as evidence.
What it does not do
It does not certify compliance with any framework and does not replace the Zendesk audit log: drift shows what changed between two snapshots, not who changed it. It never changes a setting.
Plans (per account, 14-day free trial on paid plans)
Free: score and the 12 authentication and access controls. Pro: all 40 controls, inventories, evidence pack, drift, accepted findings, SOC 2 / ISO 27001 / HIPAA / PCI DSS / GDPR mapping. Business: Pro plus evidence inside your account, comparison of any two snapshots, quarterly access review packs with sign-off, priority support.
Data disclosure
Read-only, with the signed-in admin's session and only when you run the audit: security and account settings, team members, roles, groups, apps, webhooks, targets, OAuth and API key metadata, business rules, deletion schedules, support addresses, brands, Guide permissions, audit log summary, sessions.
Nothing leaves your account: no server, no vendor account, no API key, no analytics, no AI.
Never stored: credential values, keys, passphrases and other apps' settings are dropped before a snapshot is kept.
Evidence stays in the admin's browser and, optionally on Business, in a custom object inside your account.
Privacy, terms and docs: https://helpcenterdoctor.app/security-audit/
Detalles de la aplicación
Cómo instalar
Security Audit & Evidence needs no account, API key or configuration.
- Click Install on this listing (you need to be a Zendesk admin), choose your account and a plan. Paid plans start with a 14-day free trial.
- On the installation screen you can restrict the app to certain roles or groups; audits run only from an admin session, so restricting it to admins is a good default. Click Install.
- Open Zendesk Support: the app is a Support app. With the unified navigation Zendesk rolled out in 2026, the Security Audit & Evidence icon sits in the left navigation bar of Support; when the bar is full it is tucked under More at the bottom of that bar. Reload the page once after installing. If an agent still cannot see it, the person who installed the app may have restricted it to certain roles or groups on the installation screen (Admin Center › Apps and integrations › Zendesk Support apps › Security Audit & Evidence); agents outside those roles or groups do not see the icon.
- Click Run audit on the Overview. The app reads about 25 read-only endpoints with your session, keeps a snapshot without sensitive values and shows the score, the findings by area and the inventories. Controls whose endpoint your plan does not expose are marked "not checkable", never guessed.
- Open Evidence to download the pack (report, snapshot, findings and inventory CSVs, manifest of hashes) or Setup on Business to create the custom object that stores evidence inside your account.
Documentation and FAQ: https://helpcenterdoctor.app/security-audit/ · Support: support@helpcenterdoctor.app
Déjanos una reseña
Comparte tu experiencia con el resto de la comunidad Zendesk
Planes y precios
Free
Never pay a thing
Score and the 12 authentication and access controls on screen: two-factor enforcement and who has not enrolled, sign-in policy level, session timeouts, IP restrictions, SSO, admin count and inactive admins and agents. No exports.
InstalarPro
Free 14-day trial, then $149.00 per month
All 40 controls with remedies and Admin Center paths, full inventories with CSV, the evidence pack (printable report, snapshot, findings and inventory CSVs, SHA-256 manifest), drift between runs, accepted findings, SOC 2 / ISO 27001 / HIPAA / PCI DSS / GDPR mapping. 14-day free trial.
Prueba gratuitaBusiness
Free 14-day trial, then $249.00 per month
Everything in Pro plus evidence stored inside your account (custom object), comparison of any two snapshots, quarterly access review packs with reviewer sign-off and every inventory, and priority support by e-mail within one business day. 14-day free trial.
Prueba gratuita