AuditRunner vs OpenWorkpaper
AuditRunner
auditrunner.comOpenWorkpaper
openworkpaper.comSide by side
| Figure | AuditRunner | OpenWorkpaper |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | Yes |
| Web | Yes | Yes |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 3 | 1 |
| Spec score · Audit Management Software | 7.5 (#13) | 8.4 (#3) |
| Access control | Auditrunner describes role-based access control, geographic access controls, and SAML-compliant SSO including Microsoft Active Directory, Okta, Salesforce, and OneLogin. | Role-based access combines system roles with audit-specific team assignments. |
| Deployment | The maker offers cloud-based or on-premise deployment. | Docker or Podman Compose deployment is recommended, with a manual Node.js installation also documented. |
| Security | The security page says audit files and documents receive at-rest encryption, encryption keys are stored in Google Cloud HSM, and transfers use TLS/SSL. | The project documents HTTPS deployment using an Nginx reverse proxy and SSL/TLS certificates. |
Plans
AuditRunner
- StarterPriced on request
- ProPriced on request
- Pro +Priced on request
In their own words
AuditRunner
AuditRunner has no write-up on Specifiction yet; its figures are above.
OpenWorkpaper
OpenWorkpaper is an open-source web application for documenting audits from planning through fieldwork and reporting. Its task dashboard lists active audits, assigned procedures, and pending reviews. A centralized request area handles client information requests and master PBC spreadsheet uploads and downloads. Procedures can record purpose, source, scope, methodology, results, conclusions, and reviewer comments, with PDF, Word, Excel, and PowerPoint attachments. Audit programs export to Word, and automatic numbering organizes groups, procedures, and attachments hierarchically. Collaboration includes assignments, team management, discussions, and preparer and reviewer sign-offs. Role-based access combines system roles with audit-specific teams. OpenID Connect works with Microsoft Entra ID, Okta, and Keycloak. The project documents HTTPS through Nginx and SSL/TLS certificates and records sensitive actions in audit logs. It supports local, private-network, and cloud deployment with a portable SQLite database. The free open-source plan is free.