diff --git a/Netgrimoire/Audits/authentik-2026-04-27.md b/Netgrimoire/Audits/authentik-2026-04-27.md
new file mode 100644
index 0000000..17d4567
--- /dev/null
+++ b/Netgrimoire/Audits/authentik-2026-04-27.md
@@ -0,0 +1,31 @@
+---
+title: Audit - authentik.yaml
+description: Gremlin audit report 2026-04-27
+published: true
+date: 2026-04-27T11:05:14.863Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-27T11:05:14.863Z
+---
+
+# Audit Report — authentik.yaml
+
+**Date:** 2026-04-27  
+**File:** swarm/authentik.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+PASS Items:
+
+1. Homepage labels are present and correctly formatted.
+2. Uptime Kuma labels are correctly referenced but not in the provided YAML, so this cannot be verified here.
+3. Caddy labels on exposed services (`authentik`) are present and correctly formatted.
+4. Placement constraints for `node.hostname == znas` are applied to all relevant services.
+
+FAIL Items:
+
+1. **Homepage Description**: The homepage description is incorrectly set as `Account Manager`. It should reflect the correct functionality or purpose of Authentik, such as "Centralized Identity and Access Management."
+
+VERDICT: FAIL
\ No newline at end of file