Security & Threat Auditing Module

Decoupled Platform Security & Telemetry

The Zero CMS Security Module provides unified back-office auditing, security telemetry, dynamic exploit risk scoring, and automated compliance auditing. It strictly separates from the Core CMS Kernel, allowing administrators to monitor system integrity and logs cleanly from a dedicated security panel.

Core Capabilities

Dynamic Telemetry Scoring: Evaluates live system parameters (such as default passwords, install files, writable folders, and admins headcount) to compile an active integrity score out of 100.
Database Security Audits: Persists security scans, warnings, and audit logs into dedicated security_audits and audit_logs MySQL tables recursively.
Automated Audit Log Purging: Leverages background jobs to clean up outdated transaction logs, maintaining database efficiency and multi-tenant isolation.

Security Audits Schema Definition

Security Audits Schema Definition sql

CREATE TABLE security_audits (
    id VARCHAR(36) PRIMARY KEY,
    site_id VARCHAR(36) NOT NULL,
    user_id VARCHAR(36) NULL,
    action VARCHAR(100) NOT NULL,
    object_type VARCHAR(100) NULL,
    object_id VARCHAR(100) NULL,
    meta JSON NULL,
    created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
    deleted_at DATETIME NULL,
    INDEX (site_id),
    INDEX (user_id)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;

Automated Purge Tasks

Outdated transaction and security audits logs are automatically cleaned up recursively by background jobs in the Job Queue to prevent database bloating and maintain top performance. The background tasks are ran by the Task Scheduler completely offline.