Scans the ecosystem from the outside and diffs what it finds against a recorded baseline, so that a newly exposed port is meant to be noticed by the ecosystem before it is noticed by anyone else.
Fatal differences are alerted through Ops Bot. The repository is private.
- Status
- Live
- Autonomy (AAL)
- L1 → L2
- Method
- External scan against a baseline
- Repository
- Private
01
Seen from outside
It scans the ecosystem from outside the perimeter, so it reports what is actually exposed rather than what is meant to be.
02
Noticed first
A newly exposed port is meant to be noticed by the ecosystem before it is noticed by anyone else; fatal differences are alerted through Ops Bot.
Capabilities
Working now
- External scan of every ecosystem host, from outside the perimeter
- Diff against a recorded baseline rather than a static allowlist
- Fatal exposures alerted through Ops Bot
Current autonomy level
Weakest link
A baseline diff reports change, not risk: an exposure that was in the baseline from the start is reported as normal.
Roadmap to L2
- Justify each baseline entry, so "always been open" stops being an argument
- Cover hosts added outside the standard provisioning path
Next step
Explore the available product and its current limits
LIVE means the project is available now; the weakest link and roadmap above state the current version’s limits.
Review the path to the target level