$ 71.57
| Required Apps |
•
Discuss (mail)
|
| Technical Name |
audit_security_sentinel
|
| License | OPL-1 |
| Also available in version | 19.0 18.0 17.0 |
Security Sentinel
Anti-Fraud & Immutable Audit Log for Odoo 19
Enterprise-grade security monitoring that seals every create, update, and delete with SHA-256 cryptographic hashing. Real-time OWL dashboard, compliance reports, automated integrity verification, and role-based access control — everything you need to protect your Odoo data and prove it.
Why You Need This
No Native Audit Trail
Odoo's built-in logging is limited. There is no out-of-the-box mechanism to track who changed what, when, and from which IP address — let alone prove that the log itself was not tampered with.
Invisible Data Manipulation
A user with the right permissions can modify prices, delete records, or alter financial data without leaving a visible trace. By the time you notice, the damage is done.
Compliance Requirements
ISO 27001, SOX, GDPR, and industry regulations demand immutable audit trails with integrity proof. Manual spreadsheets and ad-hoc reports are not enough for auditors.
Key Features
Real-Time OWL Dashboard
Live KPIs, activity-by-hour charts, top monitored models, user activity ranking, and integrity status — all in a single, blazing-fast OWL component. No page reloads required.
SHA-256 Immutable Logging
Every log entry is sealed with a SHA-256 hash using a secret cryptographic salt. Logs cannot be edited or deleted through the ORM. Any tampering attempt is detected automatically.
Automated Integrity Verification
A weekly scheduled action recalculates hashes for all recent logs and compares against stored values. Compliance Officers are notified instantly if any record has been tampered with.
Compliance Reports (PDF/Excel)
Generate detailed audit reports filtered by date range, with full change history. Export to PDF for auditors or Excel for analysis. One-click reporting wizard built into the module.
Configurable Audit Rules
Choose exactly which models and fields to monitor. Enable or disable create, write, and delete tracking per model. Focus on what matters and reduce noise.
Role-Based Access Control
Two built-in security groups: Audit User for read-only log access, and Compliance Officer for full configuration and reporting. Separation of duties enforced from day one.
Screenshots
Real-Time Security Dashboard
Immutable Audit Log with SHA-256 Hash
Configurable Audit Rules
Compliance Report Wizard
How It Works
Install & Activate
Install the module. Audit hooks are automatically injected into Odoo's core
create
,
write
, and
unlink
methods via
a safe monkey-patch with double-patch protection.
Configure Audit Rules
Go to Security Sentinel → Configuration → Audit Rules and select which models to monitor. Optionally restrict tracking to specific fields for fine-grained control.
Automatic Monitoring
From this point forward, every create, update, and delete on monitored models is logged with the user, IP address, old/new values, and a SHA-256 integrity hash. All entries are read-only and immutable .
Monitor & Report
Use the real-time dashboard for daily oversight. Generate PDF or Excel compliance reports for auditors. The weekly integrity cron verifies all hashes and notifies Compliance Officers if tampering is detected.
Configuration
Navigate to Settings → Security Sentinel to configure:
Log Retention
Set how many days audit logs are kept. A monthly cron automatically purges old records for GDPR/storage compliance.
Dashboard Refresh
Configure the auto-refresh interval for the real-time dashboard. Default: 60 seconds.
Hash Salt Management
View a masked preview of the cryptographic salt. Regenerate only if absolutely necessary (invalidates all existing hashes).
Technical Details
| Odoo Version | 19.0 |
| Module Version | 19.0.2.0.0 |
| License | OPL-1 (Odoo Proprietary) |
| Dependencies |
base
,
mail
,
web
|
| Frontend | OWL Framework (no legacy jQuery) |
| Hash Algorithm | SHA-256 with per-instance cryptographic salt |
| Hook Method |
Safe monkey-patch on BaseModel (
create
,
write
,
unlink
) with double-patch guard
|
| Performance | 5-minute rule cache, composite DB indexes, batch SQL processing, raw SQL for integrity verification |
| Reports | PDF (QWeb) and Excel export via wizard |
| Scheduled Actions | Weekly integrity verification + monthly log cleanup |
| Languages | English, Spanish (es.po included) |
What Sets This Apart
Zero Performance Impact
Rule caching, composite indexes, and batch processing ensure negligible overhead even at high transaction volumes.
IP Address Tracking
Captures the client IP for every action with full proxy support (X-Forwarded-For, X-Real-IP).
Full Change Diffs
Old and new values are stored as JSON for every write operation. See exactly what changed, field by field.
Support & Contact
Need help with installation, configuration, or have a feature request? We are here to help.
github.com/neurodev-apps
Developed by NeuroDev
Odoo Proprietary License v1.0 This software and associated files (the "Software") may only be used (executed, modified, executed after modifications) if you have purchased a valid license from the authors, typically via Odoo Apps, or if you have received a written agreement from the authors of the Software (see the COPYRIGHT file). You may develop Odoo modules that use the Software as a library (typically by depending on it, importing it and using its resources), but without copying any source code or material from the Software. You may distribute those modules under the license of your choice, provided that this license is compatible with the terms of the Odoo Proprietary License (For example: LGPL, MIT, or proprietary licenses similar to this one). It is forbidden to publish, distribute, sublicense, or sell copies of the Software or modified copies of the Software. The above copyright notice and this permission notice must be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
