Security operations · v1.0.0

QuestAnswer

Security Questionnaire Answerer

Select approved answers. Cite the source. Leave unsupported claims blank.

For a small B2B team answering vendor security questionnaires from its own approved answer library. Find a current answer without inventing a control or certification.

Get QuestAnswer · $19 All five · $49

One-time USD source-pack license. Manual delivery, not a web app or AI subscription.

What the tool actually does

Copies exact answers and evidence from your approved CSV library.
Checks response type, cited source identity, expiry date and complete question coverage.
Abstains on missing, stale or ambiguous matches; fuzzy matches are marked for review.

Bring: Questionnaire JSON plus an approved answer-library CSV with source IDs, answer text, evidence and expiry dates.
Get: A JSON answer sheet with MATCH, REVIEW or UNANSWERED status per question, plus validator errors.
Without a model: Normalized/fuzzy library retrieval without a model. No answer is synthesized.

Small, invented example—not a customer result

questions.json → answers.json
Q1  Is data encrypted at rest?  MATCH / POL-01 / Yes
Q2  Backup retention?           MATCH / POL-02 / 14 days
Q3  Expired certification?      UNANSWERED
Q4  Unsupported control?        UNANSWERED

Illustrative excerpt from the shipped synthetic fixtures. A successful example is not an accuracy benchmark.

See the CLI workflow

python3 scripts/questanswer.py draft questions.json library.csv --out answers.json
python3 scripts/questanswer.py validate questions.json library.csv --answers answers.json

Where QuestAnswer stops

A citation is not proof that a policy is true or relevant. A security owner must review every answer. No compliance certification or native SIG/CAIQ Excel importer.

Tested on Linux/Python with small synthetic inputs. Customer workloads, Windows/macOS, agent auto-install/discovery and every host version are untested.

In the download

Actual Skill recipe and deterministic Python engine/validator
English README, input fixtures, reference outputs and executable unit tests
Personal/internal commercial-use license; client outputs are allowed, source-pack redistribution is not

Python 3.10+ is required. SheetAudit also needs openpyxl. Text-PDF extraction in RedlineBrief optionally needs Poppler pdftotext. Models and third-party runtimes are not included. These are source tools, not one-click desktop installers.

Exact testing scope and alternatives · License, delivery and payment terms