Data Center Security Review
AutoQ guides your review / audit team through 111 data center controls and writes the statement of fact, risk, effect and recommendation for every answer, ready for the report.
Try the sample control on the right. Choose an answer to see the finding AutoQ writes.
Determine if the network is segmented by firewalls between the internet, DMZ and internal zones, and firewall rules are reviewed at least semiannually.
Who it's for
Assign categories, watch progress by section, and issue findings that are already written in report language.
Work from one shared questionnaire. Every answer is signed with the auditor's name and time, so the audit trail builds itself.
Run a self-assessment against the same controls an auditor will use, and see the gaps ranked by risk before the audit starts.
What's covered
Every control carries a risk weight from 1 to 3 and references to NIST SP 800-53 Rev 5, ISO/IEC 27001:2022 Annex A and COBIT 2019.
| Category | Code | Controls | High risk | Main focus areas |
|---|---|---|---|---|
| Physical Security | PH | 22 | 5 | Access control, environmental protection, asset protection, monitoring |
| Data Security | DS | 27 | 10 | Encryption, network security, privileged access, access provisioning |
| Backup | BK | 19 | 7 | Backup operations, governance, storage, access |
| Recovery | RC | 20 | 6 | Disaster recovery planning, infrastructure, testing, procedures |
| Change Management | CM | 23 | 5 | Approval, configuration, governance, segregation of duties |
| All categories | 111 | 33 |
Try it
Hosted projects on the AutoQ server: each project with its own link and passwords, and an account page for your organization. Each subscription includes one full questionnaire built with AI for what you audit; more builds are $59 each. Coming soon. To hear first when hosted trials open, tell us on the Contact page.
Features
AutoQ replaces the spreadsheet-and-Word routine of a data center audit with one shared workspace.
No complex database to administer. The standalone version runs everything from a standard Excel workbook, with all editing going directly to and from the spreadsheet. That makes it easy to add to and edit the questionnaire content.
Category ratings
The workbook rates each category from its answers. N/A answers are left out. The thresholds can be adjusted to your methodology.
How it works
The review follows the way auditors already work. Review loops back to testing whenever a finding needs correcting or follow-up.
Live demo
The demo is the standalone edition running on this server, with sample answers already entered. Browse the controls, change an answer and watch the findings and project status update. Use the password demo to sign on and admin for the demo's Admin tab.
This server
Demo video
A nine-minute tour of AutoQ: a review from the first control to the final report, the findings it writes, and the reports you hand over. No sign-in needed: it plays here, full window.
What to try
The demo asks you to sign in with your name and a sign-on password: on the AutoQ demo it is shown on the sign-in page; otherwise ask your administrator. Can't get in?
Screens
The layout adapts to phones and tablets, so auditors can record answers during the walkthrough instead of transcribing notes afterwards. It follows the device's light or dark setting, or the Dark mode switch next to Sign out, and stays readable with Windows high contrast turned on.
Pricing
Draft pricing for discussion. Final prices to be confirmed.
Hosted projects on the AutoQ server: each project with its own link and passwords, and an account page for your organization. Each subscription includes one full questionnaire built with AI for what you audit; more builds are $59 each. Coming soon. To hear first when hosted trials open, tell us on the Contact page.
Contact us about converting your proprietary review content to an AutoQ system. It's easy and takes a minimum of time and effort.
Content packs
Each content pack is a complete Excel control questionnaire for a new subject: 100 controls with test procedures, evidence to request, generated findings and recommendations, criteria references and domain ratings. Each comes with its own installer, which adds it to AutoQ Standalone or Enterprise, where it runs alongside your other reviews. One pack is included with Standalone and Enterprise; add more whenever you need them.
Content packs run on AutoQ Standalone and Enterprise Version 3.1, and in hosted projects. Criteria references should be checked by a qualified reviewer against the framework editions your audit uses.
| Feature | Hosted | Standalone | Enterprise Version 3.1 |
|---|---|---|---|
| A content pack of your choice, with test procedures and evidence lists | Yes | Yes | Yes |
| Generated findings, exceptions and recommendations | Yes | Yes | Yes |
| Project status by category | Yes | Yes | Yes |
| PDF and CSV exports | Yes | Yes | Yes |
| Live updates between auditors | Yes | Yes | Yes |
| Sign-in | Your Claude account | Name plus shared password | Name plus the review's own or the shared password |
| Evidence files uploaded to each control, listed by category on Findings | No | No | Yes |
| Answers saved to your Excel workbook | No | Yes | Yes |
| Runs on your own network | No | Yes | Yes |
| Workbook backups and password changes on the Admin tab | No | Yes | Yes |
| Security log of sign-ins and admin actions | No | Yes | Yes |
| Several questionnaires from one server, listed after one sign-in | No | With extra content packs | Yes |
| Separate passwords for each review or client | No | No | Yes |
| Create new AI-generated control questionnaires for other subjects, of the size you choose | No | Questionnaire Builder add-on | Yes |
| Project reports as PDFs: opening letter, getting started guide, status report, meeting agenda, final report | No | No | Yes |
| Download a review as one .zip, and re-load it here or on another server | No | No | Yes |
Security
These protections are built into the standalone edition and Enterprise Version 3.1, which run on your own server, so your answers and evidence stay with you. The hosted edition uses claude.ai sign-in and sharing to control who can open and change a review.
Nothing in the review, including the answers, is sent to a browser until someone signs in.
The server records the signed-in name with every save. The browser can't change it.
Three wrong passwords in a row block that computer for 15 minutes, even with the right password. Ten wrong administrator passwords within an hour, from any addresses, lock that login everywhere for 15 minutes.
Sign-ins, failed sign-ins, lockouts, Admin unlocks, password changes and other administrative changes are logged with the time, address and name, one event per line so entries can't be forged by what someone types.
The server checks the administrator password, and the tab locks again after 30 minutes without activity.
Passwords changed in the app are stored salted and hashed, so they can't be read back from the file.
The standalone server runs on your own computer, and answers stay in your workbook. By default only that computer can open it.
A copy of the workbook is saved when the server starts, before every Clear All and before a project is re-loaded, with the 30 most recent kept. Enterprise Version 3.1 also downloads a whole review as one .zip, without passwords.
Install a certificate and the server switches to HTTPS, refuses anything older than TLS 1.2, and only sends the sign-in cookie encrypted.
Enterprise Version 3.1: each review or client can have its own passwords. Without a review's password, people can't see its name, its progress or even that it exists.
Enterprise Version 3.1: the website and store administration answers only from your local network, or from addresses you list. Anyone else sees a notice instead of a sign-in form, and every refused attempt is logged.
The website and store administration has no built-in password. You choose it on the server itself during installation, with at least 12 characters, and it is stored salted and hashed.
When an administrator login is locked by repeated wrong passwords, the server emails your notification address straight away.
Every page carries a content security policy and other security headers, so other sites can't frame it or inject scripts into it. On HTTPS, browsers are told never to fall back to plain HTTP, and sign-in cookies can't be read by scripts or sent from other sites.
The server sends only the files it is meant to: no folder listings, settings, logs, backups or source code. Requests by bare IP address, as internet scanners send them, get a plain "not found", and the administration pages and their code are sent only after sign-in. We test this with the same kind of crawler attackers use to copy websites.
Every page the server sends is logged with the time and address, including refused requests, so unusual activity stands out. Outside addresses can be shown with their approximate location; you can switch that lookup off.
A project downloaded as a .zip holds only that project's own answers, evidence and settings: never passwords, other projects or the server's own settings.
Enterprise Version 3.1 sets up a free Let's Encrypt certificate for HTTPS and renews it automatically, and the certificate can be checked and renewed from the Admin tab.
Until a certificate is installed the standalone edition uses plain HTTP, so run it on a trusted internal network. Setting up HTTPS takes about 20 minutes, and Enterprise customers get help with it. The shared review passwords start as the published demo passwords on a server without a demo review: change them on the Admin tab before anyone else can reach the server.
FAQ
Every control references NIST SP 800-53 Rev 5, ISO/IEC 27001:2022 Annex A and COBIT 2019. You can search the questionnaire by any of those references, for example PE-3, 8.13 or DSS05.
They're written in report language, and Copy report as text puts the whole report on the clipboard for Word. Before issuing, add the cause you found during testing to each recommendation.
The hosted edition runs on claude.ai: you open a shared link and sign in with your account. The standalone edition runs on one Windows computer in your office, saves answers into your Excel workbook, and adds the security log, backups and password management. See .
One computer running Windows 10 or 11 (or Windows Server 2016 or later). A single installer sets everything up, including Node.js, in about five minutes and without needing internet access. Auditors only need a current browser on a computer, tablet or phone.
Yes. Answers saved by one person appear on everyone else's screen within a few seconds, and each answer records who saved it and when.
Yes, with Enterprise Version 3.1. The Admin tab makes five reports as PDFs: the opening conference letter, a one-page getting started guide for team members, a project status report, a project review meeting agenda and the final report. The figures, exceptions, category ratings and findings come from the answers; you add your logo, the project details and your own wording. The reports are HTML templates, so their layout and standard text can be changed to your house style, for every review or just one. In every edition, the PDF, Word and Export CSV buttons are available on every tab.
Minutes. With Enterprise Version 3.1 the Admin tab makes a one-page getting started guide for your auditors, with the review's address, how to sign in and answer a control, their assignments and the deadline. Each auditor also gets a one-page User Quick Start, and administrators a one-page Administrator Quick Start covering installation to the final report, with the full manuals for detail.
Yes. The controls live in the workbook's Control Library sheet and the thresholds in its Domain Summary sheet. Changes there show up in the review. With Enterprise Version 3.1, or Standalone with the Questionnaire Builder add-on, you can also create new control questionnaires for any subject with Claude, of the size you choose, from a page on the Admin tab that writes the prompt and checks the result, or have us set one up for you.
Yes. In the standalone edition the workbook is the record. Close it while people are saving, because Excel locks the file while it's open. Edits you save in Excel appear in the review within seconds.
Export a CSV and PDFs for the record, or with Enterprise Version 3.1 download the whole project as one .zip, then use Clear All on the Admin tab. For a separate review per site or year, Enterprise Version 3.1 runs each one side by side on the same server.
Yes, with Enterprise Version 3.1. Download project (.zip) on the Admin tab saves the review as one file: the workbook with every answer and comment, the evidence files, the reports and the site and report details. Passwords are never included. Re-load a project loads that file back, into the same review or one on another server. The server checks the file first and moves everything it replaces into the backups folder, so nothing is lost.
The edition for teams running more than one review. One server runs several questionnaires, such as one per data center, per client or per year, and lists them after a single sign-in. Each review keeps its own workbook, answers, evidence, backups and site details, and can have its own passwords so one client's team never sees another's review. It also runs your own control libraries for subjects other than data centers.
Order & download
Buy AutoQ Standalone in our online store, with the content pack you choose, by card or by purchase order. Card payments are taken by Lemon Squeezy, our reseller, which adds the right sales tax or VAT and emails your receipt; the store emails your download link.
Draft pricing and terms for discussion. Final prices and the licence agreement to be confirmed.
Hosted projects on the AutoQ server: each project with its own link and passwords, and an account page for your organization. Each subscription includes one full questionnaire built with AI for what you audit; more builds are $59 each. Coming soon. To hear first when hosted trials open, tell us on the Contact page.
Tick this to enable Buy a hosted review. The store asks for it when you buy AutoQ Standalone.
Online checkout for hosted reviews opens soon. Until then, and we'll send an invoice.
How ordering works
Already bought? Your order email from the store has the download link. If it has expired or gone missing, reply to that email and we'll send a new one.
Download
Your download link gives you these files. Check a file's SHA-256 fingerprint in PowerShell with Get-FileHash <file> before running it.
Version 3.1 (3.1.0), published 2026-10-25. Install AutoQ first, then your content pack. If you can't use the installers, alternative .zip files for installation are available from support@autoq-ai.com.
| File | Size | SHA-256 |
|---|---|---|
| AutoQ-Standalone-Setup-3.1.0.exe Installer · AutoQ Standalone: Windows installer, Node.js included | 74.0 MB | BAFF7D011A2D2C23228047B5BBE8A4E13F8E352632E93514C8FA2CF40EF334B1 |
| AutoQ-Enterprise-Setup-3.1.0.exe Installer · AutoQ Enterprise: Windows installer, Node.js included | 74.3 MB | 015DEE8E4C363B7E99C145C89D11D3E1DDBBA76122BDD60AFF66FBE215830633 |
| AutoQ-Pack-ConstructionSiteSafety-Setup-3.1.0.exe Content pack · Construction Site Safety Review: adds it to AutoQ | 2.1 MB | 5365AE24ECC562709828740103D18FA8F73924653435784BDF38143988D738AB |
| AutoQ-Pack-CyberSecurity-Setup-3.1.0.exe Content pack · Cyber Security Review: adds it to AutoQ | 2.1 MB | 5C198DD382C4E6B344CB2CAE508CD776300A7F1E25ABC9C04D78AC49C9BAB204 |
| AutoQ-Pack-DangerousChemicalSafety-Setup-3.1.0.exe Content pack · Dangerous Chemical Safety Review: adds it to AutoQ | 2.1 MB | AA4F099CAFD557F32AC96CFB385B647D49069E5C4E9F6B6C028DC2CFDC3E0370 |
| AutoQ-Pack-DataCenterSecurity-Setup-3.1.0.exe Content pack · Data Center Security Review: adds it to AutoQ | 2.1 MB | B48F199FEDFCCFE838E6BF9B3A52833AD18D75BA43DDAED87CFCFC145BC525BF |
| AutoQ-Pack-NetworkAdministration-Setup-3.1.0.exe Content pack · Network Administration Review: adds it to AutoQ | 2.1 MB | 6296412976196E1F29320E439002CA58A9101BE537B8D7C0F681A10B7DD5A35D |
| AutoQ-Pack-NuclearMaterialsSafety-Setup-3.1.0.exe Content pack · Nuclear Materials Safety Review: adds it to AutoQ | 2.1 MB | 0E41132F6743AB2B0B1D77F35AD5B78727A3733F475AB1E9578D496037600C1F |
| AutoQ-Pack-SoftwareDevelopmentLifeCycle-Setup-3.1.0.exe Content pack · Software Development Life Cycle Review: adds it to AutoQ | 2.1 MB | 9EB40E38CF717D897E68BF02F2FD85F8D9BC77DCE8A3C3EDD0164C6B43208E9D |
| AutoQ-Pack-SoftwareDevelopment-Setup-3.1.0.exe Content pack · Software Development Review: adds it to AutoQ | 2.1 MB | 5373231441C07F0654CD9A5B77CB551ED7FE41BBC25692937FB3E535B045765C |
| AutoQ-Questionnaire-Builder-Setup-3.1.0.exe Add-on · Questionnaire Builder for Standalone (Enterprise includes it): turns on Build Questionnaires with Claude | 2.4 MB | 36BF0F6A78F3DAA14264BFC5E2C1DC8CE865A0A02EF7BC244AF35DBADEE6ADEB |
Documents
The Administrator Manual and the Administrator Quick Start come with your download, because they contain the default passwords, and so does the guide to building new questionnaires.
If AutoQ doesn't work for you, ask for a full refund within 30 days of your first licence purchase. Renewals can be cancelled before the renewal date. Refunds are issued by Lemon Squeezy to the original payment method.
A site licence covers one installation at one site, for any number of your staff and reviews, for one year. Your data stays on your network: we never receive your answers or workbooks. The licence agreement is the full and binding text.
Contact
Ask for a walkthrough, a standalone trial or a quote. Tell us how many data centers you review each year.
Admin
The Admin tab works when this website is served by the AutoQ server.
The Admin sign-in is only available from the AutoQ team's own network.