Files
claudetools/projects/msp-tools/security-assessment
Mike Swanson 260be8c2ad security.azcomputerguru.com: scaffold the client security-assessment intake app
New MSP tool — single-assessor consult intake. Stack: PHP + MySQL on the IX cPanel
host, gated by Cloudflare Access (only mike@azcomputerguru.com; app re-checks the
Cf-Access-Authenticated-User-Email header).

- app/questions.json — risk-ordered question framework (9 sections); each field tagged
  source=syncro/rmm/scan/ask so the consult asks only what a human knows and the
  post-meeting scan fills the technical reality.
- app/index.php — wizard UI: Syncro phone lookup -> prefill, section rail with live
  progress, importance-colored question cards, in-meeting 365/Google consent links,
  review + export.
- app/api.php — Syncro lookup-by-phone, save/load/list, consent-URL generation (reuses
  the read-only Security Investigator app bfbc12a4-...), HTML export.
- app/schema.sql, config.sample.php, DEPLOY.md, README.md.

Consent links let the client approve read-only 365/Google access during the consult so
the audit scan runs afterward. Read-only by design (reads Syncro, generates consent; no
tenant writes).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-18 14:20:05 -07:00
..

ACG Security Assessment (security.azcomputerguru.com)

Single-assessor intake tool: identify the client by Syncro phone number, prefill what we can, walk Mike through a risk-ordered questionnaire during the consult, capture read-only 365/Google consent on the spot, and export the audit work-list for the post-meeting automated scan.

  • app/questions.json — the question framework (sections, fields, sources, importance).
  • app/index.php — the wizard UI (Cloudflare-Access gated).
  • app/api.php — Syncro lookup, save/load, consent-link generation, export.
  • app/schema.sql — MySQL schema. DEPLOY.md — hosting + Cloudflare Access steps.

Stack: PHP + MySQL on the IX cPanel host, behind Cloudflare Access (only mike@azcomputerguru.com).