Rough auditing tool for security