Gather Audit Evidence in One Pass
For audit season. DuckyHelper learns ServiceNow and Cloudflare once, pulls the access reviews and firewall rules for the period, compares them with last quarter, flags anything missing a sign-off, and builds the evidence pack in Notion.
“Build our Q3 audit evidence in Notion: ServiceNow access reviews, Cloudflare firewall rules vs last quarter, and missing sign-offs.”
- 01Write small tools for ServiceNow and Cloudflare, onceSmall JavaScript tools made from how each site already works. The next run calls them directly.
listAccessReviews(range)getFirewallRules(zone)
- 02Pull access reviews for the period
- 03Export the current firewall rules
- 04Compare them with last quarter
- 05Flag reviews missing a sign-off
- 06Build the evidence pack in Notion
You getAudit-ready without the scramble. Everything the auditor asks for in one place, with gaps called out. Next quarter is one ask.
A run, drawn from this page · early access on Mac
Nothing to send, so it runs straight through.
Nothing in this job sends a message or pays for anything, so it works through to the end and tells you when it's done. If a step ever would, it's built to stop and ask you first.
If it hits a sign-in, you sign in yourself. It's built not to type your passwords or card numbers.
Before you ask it.
What do I say?
Press fn (Ctrl+Shift+Space on Windows and Linux) and ask out loud, in your own words, like "Build our Q3 audit evidence in Notion: ServiceNow access reviews, Cloudflare firewall rules vs last quarter, and missing sign-offs."
Why is the second time faster?
The first time, it writes small JavaScript tools for ServiceNow, Cloudflare and Notion and builds an API from each site's own buttons, forms and requests. After that it calls them directly, so the job runs in one go instead of click by click. It costs less and breaks less.
Will it send anything without me?
It's built to ask first before it sends a message or pays for anything, and to wait for your yes. It may not recognize every send or payment, so keep an eye on tasks that involve messages or money. It's built not to type your passwords or card numbers: you sign in yourself, and it picks up from there.
Why not just do it by hand?
Evidence means screenshots and exports from many tools, collected by hand every quarter.
Can I use this today?
Doing jobs in your apps is in early access on Mac. Talking to DuckyHelper, and having it see your screen and draw on it, works today on Mac, Windows and Linux.
- Early access
“Customers report checkout errors. Check Datadog, Intercom and recent deploys, and draft a Slack update.”
Investigate an Incident Across Every Dashboard
See it run
- Early access
“Acknowledge this PagerDuty page, pull the Datadog dashboard and recent deploys, and draft a war-room post.”
Answer an On-Call Page With a Head Start
See it run
- Early access
“Triage this PagerDuty alert: check Datadog against traffic and deploys and tell me if it's real.”
Triage a PagerDuty Alert in Minutes
See it run
Do anything
Ask it a question or hand it a job, in any app.
Doing jobs for you is in early access on Mac. Asking works on Mac, Windows and Linux.