Studio Platform Documentation¶
Welcome to the Studio Platform - an enterprise-grade Compliance, Audit, and Security Management platform that unifies evidence collection, policy management, infrastructure monitoring, and reporting into a single collaborative interface.
🚀 Quick Start¶
-
Quick Start
Get Studio running in minutes with Docker
-
User Guide
Learn how to use Studio's features effectively
-
Admin Guide
Configure and manage your Studio deployment
-
Developer Guide
API documentation and development resources
🌟 Key Features¶
🛡️ Compliance Management¶
- Real-time Compliance Scoring - Track progress against SOC2, ISO 27001, GDPR, and more
- Cross-Framework Mapping - Leverage evidence across multiple compliance frameworks
- Gap Analysis - Identify and prioritize missing controls automatically
🤖 AI-Powered Assistant¶
- Context-Aware Chat - Get intelligent assistance based on your role and context
- Policy Generation - Create customized security policies from professional templates
- Smart Search - Find relevant information across all your documents and evidence
🔍 Risk Management¶
- Unified Risk Dashboard - Aggregate findings from FleetDM agents and Prowler cloud scans
- Automated Scoring - Weighted risk scoring with severity-based categorization
- Real-time Monitoring - Continuous security posture assessment
📁 Evidence Management¶
- Secure Storage - Role-based access control for all evidence files
- Visual Annotations - Draw and comment directly on PDFs and images
- Smart Tagging - Automatic tagging and graph-based relationship mapping
👥 Collaboration Tools¶
- Secure Chat - Role-based messaging between auditors, managers, and customers
- Project Management - Guided onboarding and project workflows
- Integration Hub - Connect with Jira, Slack, Google Calendar, and more
🏗️ Architecture Overview¶
graph TD
User[User / Browser] -->|HTTPS/WebSocket| Kong[Kong API Gateway]
subgraph "Edge Layer"
Kong -->|Auth| Kratos[Ory Kratos]
Kong -->|Authorize| OPA[OPA Policy Server]
end
subgraph "Application Layer"
Kong -->|API| Backend[Backend API]
Kong -->|AI| AIService[AI Service]
Kong -->|Fleet| FleetService[Fleet Service]
end
subgraph "Data Layer"
Backend -->|Relational| Postgres[(PostgreSQL)]
Backend -->|Graph| Neo4j[(Neo4j)]
Backend -->|Vector| ChromaDB[(ChromaDB)]
Backend -->|Files| MinIO[(MinIO)]
end 📦 Deployment Options¶
Docker Compose (Recommended)¶
# Clone the repository
git clone https://github.com/OmerRastgar/studio.git
cd studio
# Configure environment
cp .env.example .env
# Edit .env with your configuration
# Start the platform
docker-compose up -d --build
Production Deployment¶
- Kubernetes - Scalable container orchestration
- Docker Swarm - Simple multi-host deployment
- Cloud Platforms - AWS, Azure, GCP deployment guides
🔧 Technology Stack¶
| Component | Technology | Purpose |
|---|---|---|
| Frontend | Next.js 14 + TypeScript | Modern web interface |
| Backend | Node.js + Express | API and business logic |
| Database | PostgreSQL + pgvector | Primary data store |
| Graph DB | Neo4j | Relationship mapping |
| Vector Store | ChromaDB | AI knowledge base |
| Auth | Ory Kratos | Identity management |
| Gateway | Kong API Gateway | API routing & security |
| AI | Google Gemini | Intelligent assistance |
| Monitoring | Grafana + Prometheus | Observability |
📚 Documentation Structure¶
- Installation - Setup and deployment guides
- User Guide - End-user documentation
- Admin Guide - System administration
- Developer Guide - API and development
- Architecture - Technical architecture
- Integrations - Third-party integrations
- Troubleshooting - Common issues and solutions
🆘 Getting Help¶
- Documentation - You're here! Browse the guides for detailed information
- GitHub Issues - Report bugs and request features
- Community - Join our community discussions
- Support - Contact our support team for enterprise assistance
📈 What's Next?¶
- Quick Start Guide - Get Studio running in minutes
- User Guide - Learn the platform features
- Admin Guide - Configure your deployment
- Developer Guide - Explore APIs and integrations
Need Help?
Check out our Quick Start Guide or Troubleshooting section if you run into any issues.
Enterprise Features
Looking for advanced features, custom integrations, or dedicated support? Contact us for enterprise options.

