Scans the ecosystem from the outside and diffs what it finds against a recorded baseline, so a newly exposed port is noticed by the ecosystem before it is noticed by anyone else. Fatal differences are alerted through Ops Bot. The repository is private.
Capabilities
- External scan of every ecosystem host, from outside the perimeter
- Diff against a recorded baseline rather than a static allowlist
- Fatal exposures alerted through Ops Bot
Current autonomy level
L1
Weakest link
A baseline diff reports change, not risk: an exposure that was in the baseline from the start is reported as normal.
Roadmap to L2
- Justify each baseline entry, so "always been open" stops being an argument
- Cover hosts added outside the standard provisioning path
Next step
Explore the available product and its current limits
LIVE means the project is available now; the weakest link and roadmap above state the current version’s limits.
Review the path to the target level