Audit Checklist Framework

Use this prompt to review message queues, worker scaling, idempotency, webhook delivery, poison pill handling, and eventual consistency risks.

Use this prompt to review package dependencies, SaaS vendors, API integrations, open-source licenses, CI/CD supply chain vulnerabilities, and third-party data access risks.

Use this prompt to review cloud costs, SaaS margins, per-user spend, AI/API costs, database costs, storage growth, free-tier abuse, and FinOps readiness.

Use this prompt to review traffic capacity, database limits, concurrency, scaling bottlenecks, load testing, backpressure, queues, cost growth, and production scale readiness.

Use this prompt to review hosting, environments, secrets, domains, DNS, deployment config, scaling limits, cloud services, and production infrastructure risk.

Use this prompt to review SOC 2 readiness, policies, access controls, vendor risk, audit evidence, incident response, change management, and security governance.

Use this prompt to review Stripe/payment gateway setup, checkout, webhooks, subscriptions, refunds, disputes, fraud, reconciliation, and revenue protection.

Use this prompt to review code structure, maintainability, duplication, architecture drift, technical debt, type safety, readability, refactoring risk, and long-term code health.

Use this prompt to review whether your app can handle growth in users, data, traffic, tenants, background jobs, AI usage, and cost.

Use this prompt to review logs, metrics, traces, alerts, dashboards, incident response, tenant impact, and production visibility.

Use this prompt to review test coverage, release safety, regressions, staging, CI gates, and production-quality risks.

Use this prompt to review SOC2 readiness, audit logs, access controls, vendor risk, data retention, policies, and enterprise procurement gaps.

Use this prompt to review failure handling, retries, timeouts, backups, graceful degradation, incidents, and production resilience.

Use this prompt to review API routes, auth, validation, versioning, webhooks, rate limits, docs, and integration readiness.

Use this prompt to find fraud paths, bot abuse, payment attacks, fake accounts, AI cost abuse, spam, scraping, and trust risks.

Use this prompt to find slow pages, expensive APIs, database bottlenecks, frontend lag, and scaling risks.

Use this prompt to review automated deployment workflows, branch protections, secrets injection, artifact signing, testing gates, and rollback capabilities.

Use this prompt to simulate an attacker’s mindset, uncover business logic flaws, evaluate privilege escalation paths, and review offensive security readiness before a public launch.

Use this prompt to review login, signup, sessions, MFA, RBAC, tenant access, account deletion, password reset, OAuth, and access-control safety.

Use this prompt to review schema design, table relationships, indexes, constraints, queries, migrations, RLS, data integrity, and long-term database health.

Use this prompt to review backups, restore testing, disaster recovery, RPO/RTO, tenant restore, file recovery, incident continuity, and business resilience.

Use this prompt to review schema design, relationships, constraints, indexes, tenant ownership, migrations, backups, and long-term data scalability.

Use this prompt to review personal data collection, AI data use, deletion, retention, exports, consent, vendors, and privacy risks.

Use this prompt to find silent data corruption, duplicate records, broken relationships, bad states, missing constraints, and unreliable business logic.

Use this prompt to review your app for authentication, authorization, secrets, API risks, data exposure, and abuse paths.

Use this prompt to check whether your app safely isolates customer, user, and tenant data.

Use this prompt to review support readiness, helpdesk workflows, ticket handling, customer communication, escalation, support tooling, and service maturity.

Use this prompt to review data retention, account deletion, tenant deletion, file cleanup, backups, privacy requests, GDPR/CCPA readiness, and data lifecycle safety.

Use this prompt to review API design, authentication, rate limits, webhooks, third-party integrations, SDK readiness, versioning, and enterprise integration maturity.

Use this prompt to review search quality, filters, sorting, indexing, relevance, empty results, saved views, and user discovery workflows.

Use this prompt to review feature flags, plan limits, admin controls, rollout safety, kill switches, entitlements, experiments, and release governance.

Use this prompt to review imports, exports, CSV handling, backups, tenant offboarding, data portability, migration safety, and user trust.

Use this prompt to review whether your app is ready for global users, multiple languages, currencies, time zones, formats, legal regions, and localization.

Use this prompt to review transactional emails, in-app notifications, lifecycle messages, deliverability, unsubscribe rules, alerts, and user communication quality.

Use this prompt to review AI quality, prompt design, cost controls, privacy, hallucination risk, abuse protection, and production readiness.

Use this prompt to review product docs, developer docs, onboarding docs, runbooks, internal knowledge, API docs, and team maintainability.

Use this prompt to review ICP, positioning, messaging, acquisition channels, landing pages, SEO, content, paid ads, referrals, and sales readiness.

Use this prompt to review event tracking, funnels, activation, retention, revenue metrics, cost visibility, dashboards, and product intelligence.

Use this prompt to review onboarding, support readiness, churn risk, help docs, feedback loops, retention signals, and customer success maturity.

Use this prompt to review usability, onboarding, mobile experience, accessibility, trust signals, CTAs, and conversion friction.

Use this prompt to review technical SEO, keywords, metadata, content quality, indexing, internal links, and organic growth opportunities.

Use this prompt to review pricing, free-tier limits, paid-plan margins, AI costs, revenue leakage, and profitability risks.

Use this prompt to review progressive web app (PWA) offline modes, local-first architectures, optimistic UI updates, conflict resolution strategies, and background sync reliability.

Use this prompt to review production reliability, SLOs, SLIs, error budgets, incident response, capacity, dependency risk, and operational resilience.

Use this prompt to review automated tests, manual QA, regression risk, release testing, edge cases, test data, CI checks, and production safety.

Use this prompt to review visual design, usability, layout, navigation, design consistency, user flows, conversion UX, and design-system maturity.

Use this prompt to review admin panels, support tools, internal access, privileged actions, audit logs, customer data visibility, and operational safety.

Use this prompt to review mobile usability, responsive layouts, touch behavior, PWA readiness, offline states, installability, and mobile performance.

Use this prompt to review WCAG readiness, keyboard access, screen readers, color contrast, forms, modals, mobile accessibility, and inclusive UX.

Use this prompt to review legal exposure, terms, policies, IP risks, vendor risk, liability, business continuity, and operational readiness.

Use this prompt to review frontend structure, components, state management, API calls, routing, styling, performance, and maintainability.

Use this prompt to review deployment safety, CI/CD, environments, secrets, rollbacks, monitoring, and production operations.

Use this prompt to test whether your app solves a real painful problem for the right users.