TIBET Audit

Compliance Health Scanner - Like Lynis, but for regulations.

Scan your projects for GDPR, AI Act, DORA, BIO2, NIS2, PIPA, APPI, PDPA, LGPD, JIS compliance in seconds.

🏦 NEW: DORA Framework (Financial Sector)

Digital Operational Resilience Act - EU regulation for financial entities.

$ tibet-audit scan --framework dora --org "ING Bank"

🏦 DORA COMPLIANCE MODE
   Pillars: 5 | BIO2 overlap: ~60%
   TIBET = Pillar 5 compliance (Information Sharing)

╔════════════════════════════════════════════════════════════╗
║  Overall Grade: B 🟢                                       ║
║  Score: 14/17 checks passed (82.4%)                        ║
╚════════════════════════════════════════════════════════════╝

PILLAR 1: ICT Risk Management (6/6 = 100%) ✅
PILLAR 5: Information Sharing (1/1 = 100%) ✅ TIBET detected!

Key insight: TIBET provides automatic Pillar 5 compliance!

══════════════════════════════════════════════════════════════════════════════
  ████████╗██╗██████╗ ███████╗████████╗     █████╗ ██╗   ██╗██████╗ ██╗████████╗
  ╚══██╔══╝██║██╔══██╗██╔════╝╚══██╔══╝    ██╔══██╗██║   ██║██╔══██╗██║╚══██╔══╝
     ██║   ██║██████╔╝█████╗     ██║       ███████║██║   ██║██║  ██║██║   ██║
     ██║   ██║██╔══██╗██╔══╝     ██║       ██╔══██║██║   ██║██║  ██║██║   ██║
     ██║   ██║██████╔╝███████╗   ██║       ██║  ██║╚██████╔╝██████╔╝██║   ██║
     ╚═╝   ╚═╝╚═════╝ ╚══════╝   ╚═╝       ╚═╝  ╚═╝ ╚═════╝ ╚═════╝ ╚═╝   ╚═╝
══════════════════════════════════════════════════════════════════════════════
  "SSL secures the connection. TIBET secures the timeline."
══════════════════════════════════════════════════════════════════════════════

Installation

npm install -g tibet-audit

Or run directly with npx:

npx tibet-audit scan

Quick Start

# Scan current directory
tibet-audit scan

# Scan specific path
tibet-audit scan ./my-project

# Scan specific categories
tibet-audit scan --categories gdpr,ai_act

# Sovereign mode (no cloud APIs)
tibet-audit scan --sovereign

# Fix issues automatically (Diaper Protocol)
tibet-audit fix --auto

# Preview fixes without applying
tibet-audit fix --wet-wipe

Programmatic Usage

import { scan, getFixableIssues, applyFixes } from 'tibet-audit';

// Basic scan
const result = await scan('./my-project');
console.log(`Score: ${result.score}/100 (Grade: ${result.grade})`);

// Scan specific categories
const result = await scan('.', { categories: ['gdpr', 'ai_act'] });

// Sovereign mode (no cloud APIs)
const result = await scan('.', { sovereignMode: true });

// Fix issues
const fixable = getFixableIssues(result.results);
await applyFixes(fixable);

Supported Regulations

| Category | Region | Checks | |----------|--------|--------| | GDPR | EU | Privacy policy, DPO, consent, DPIA, breach notification | | AI Act | EU | Risk classification, documentation, human oversight | | PIPA | South Korea | Explicit consent, CPO, 24h breach notification | | APPI | Japan | Privacy manager, cross-border transfers | | PDPA | Singapore | Consent, DPO, 3-day breach notification | | LGPD | Brazil | Legal basis, Encarregado, ARCO rights | | JIS | Universal | Bilateral consent, TIBET provenance, intent verification | | BIO2 | Netherlands | Dutch government security baseline (17 automated checks) | | NIS2 | EU | Network security directive (via BIO2 + ISO 27001) |

🇳🇱 BIO2 Framework - Dutch Government Baseline

71 dagen tot NIS2 deadline (18 april 2026)

BIO2 = Baseline Informatiebeveiliging Overheid 2, de Nederlandse overheidsstandaard voor informatiebeveiliging. tibet-audit ondersteunt nu 17 geautomatiseerde BIO2 checks met Grade A-F scoring.

# BIO2 scan met organisatienaam
tibet-audit scan --framework bio2 --org "Gemeente Amsterdam"

Output voorbeeld:

╔══════════════════════════════════════════════════════════════╗
║                    BIO2 Compliance Report                    ║
║                  Gemeente Amsterdam                          ║
╠══════════════════════════════════════════════════════════════╣
║  Overall Grade: A ✅                                         ║
║  Score: 17/17 checks passed (100.0%)                        ║
╚══════════════════════════════════════════════════════════════╝

BIO2 → NIS2 Alignment

"BIO2 + ISO 27001 certificering = NIS2 zorgplicht invulling" — CIP/MinBZK guidance

| BIO2 Chapter | Domain | Automated Checks | |--------------|--------|------------------| | 5 | Organisatorisch | 5 checks | | 6 | Personeel | Planned | | 7 | Fysiek | Planned | | 8 | Technologisch | 12 checks |

CLI Options

Scan

tibet-audit scan [path] [options]

Options:
  --categories, -c  Categories to check (gdpr,ai_act,pipa,appi,pdpa,lgpd,jis)
  --framework, -f   Framework: bio2, nis2, gdpr, ai_act, dora
  --org             Organization name for compliance report
  --output, -o      Output format: terminal, json
  --quiet, -q       Minimal output
  --cry             Verbose mode - all the details
  --sovereign       No cloud APIs, fully local

Fix

tibet-audit fix [path] [options]

Options:
  --auto, -a        Diaper Protocol: fix everything, no questions
  --wet-wipe, -w    Preview what would be fixed (dry-run)
  --sovereign       No cloud APIs, fully local

The Diaper Protocol

One command, hands free, compliance done.

tibet-audit fix --auto

Like a diaper change - press the button, hands free, mess cleaned up.

Sovereign Mode

Run all checks locally without any cloud API calls:

tibet-audit scan --sovereign
tibet-audit fix --sovereign --auto

Your data never leaves your machine.

Scoring

• A (90-100): Excellent compliance
• B (80-89): Good compliance
• C (70-79): Adequate compliance
• D (60-69): Needs improvement
• F (<60): Critical gaps

Also Available

• Python: pip install tibet-audit
• npm: npm install tibet-audit (this package)

License

MIT License - Jasper van de Meent & HumoticaOS

Part of the TIBET Ecosystem - Transparent Immutable Bilateral Event Trails

"SSL secures the connection. TIBET secures the timeline."