Skip to content


Studio Platform Documentation

Welcome to the Studio Platform - an enterprise-grade Compliance, Audit, and Security Management platform that unifies evidence collection, policy management, infrastructure monitoring, and reporting into a single collaborative interface.

🚀 Quick Start

  • Quick Start


    Get Studio running in minutes with Docker

    Quick Start Guide

  • User Guide


    Learn how to use Studio's features effectively

    User Guide

  • Admin Guide


    Configure and manage your Studio deployment

    Admin Guide

  • Developer Guide


    API documentation and development resources

    Developer Guide

🌟 Key Features

🛡️ Compliance Management

  • Real-time Compliance Scoring - Track progress against SOC2, ISO 27001, GDPR, and more
  • Cross-Framework Mapping - Leverage evidence across multiple compliance frameworks
  • Gap Analysis - Identify and prioritize missing controls automatically

🤖 AI-Powered Assistant

  • Context-Aware Chat - Get intelligent assistance based on your role and context
  • Policy Generation - Create customized security policies from professional templates
  • Smart Search - Find relevant information across all your documents and evidence

🔍 Risk Management

  • Unified Risk Dashboard - Aggregate findings from FleetDM agents and Prowler cloud scans
  • Automated Scoring - Weighted risk scoring with severity-based categorization
  • Real-time Monitoring - Continuous security posture assessment

📁 Evidence Management

  • Secure Storage - Role-based access control for all evidence files
  • Visual Annotations - Draw and comment directly on PDFs and images
  • Smart Tagging - Automatic tagging and graph-based relationship mapping

👥 Collaboration Tools

  • Secure Chat - Role-based messaging between auditors, managers, and customers
  • Project Management - Guided onboarding and project workflows
  • Integration Hub - Connect with Jira, Slack, Google Calendar, and more

🏗️ Architecture Overview

graph TD
    User[User / Browser] -->|HTTPS/WebSocket| Kong[Kong API Gateway]

    subgraph "Edge Layer"
        Kong -->|Auth| Kratos[Ory Kratos]
        Kong -->|Authorize| OPA[OPA Policy Server]
    end

    subgraph "Application Layer"
        Kong -->|API| Backend[Backend API]
        Kong -->|AI| AIService[AI Service]
        Kong -->|Fleet| FleetService[Fleet Service]
    end

    subgraph "Data Layer"
        Backend -->|Relational| Postgres[(PostgreSQL)]
        Backend -->|Graph| Neo4j[(Neo4j)]
        Backend -->|Vector| ChromaDB[(ChromaDB)]
        Backend -->|Files| MinIO[(MinIO)]
    end

📦 Deployment Options

# Clone the repository
git clone https://github.com/OmerRastgar/studio.git
cd studio

# Configure environment
cp .env.example .env
# Edit .env with your configuration

# Start the platform
docker-compose up -d --build

Production Deployment

  • Kubernetes - Scalable container orchestration
  • Docker Swarm - Simple multi-host deployment
  • Cloud Platforms - AWS, Azure, GCP deployment guides

🔧 Technology Stack

Component Technology Purpose
Frontend Next.js 14 + TypeScript Modern web interface
Backend Node.js + Express API and business logic
Database PostgreSQL + pgvector Primary data store
Graph DB Neo4j Relationship mapping
Vector Store ChromaDB AI knowledge base
Auth Ory Kratos Identity management
Gateway Kong API Gateway API routing & security
AI Google Gemini Intelligent assistance
Monitoring Grafana + Prometheus Observability

📚 Documentation Structure

🆘 Getting Help

  • Documentation - You're here! Browse the guides for detailed information
  • GitHub Issues - Report bugs and request features
  • Community - Join our community discussions
  • Support - Contact our support team for enterprise assistance

📈 What's Next?

  1. Quick Start Guide - Get Studio running in minutes
  2. User Guide - Learn the platform features
  3. Admin Guide - Configure your deployment
  4. Developer Guide - Explore APIs and integrations

Need Help?

Check out our Quick Start Guide or Troubleshooting section if you run into any issues.

Enterprise Features

Looking for advanced features, custom integrations, or dedicated support? Contact us for enterprise options.