Skip to content

Standards

A standard is the rulebook · a baseline picks its rules for a system · a control is one rule Standardsthe rulebooks this instance tracks Baselinesthe set of rules chosen for a platform Controlsone rule at a time, and what changed

STIGsa platform's rules, with check and fix Change registerevery release, control by control Atlasthe rhythm of releases, and what is due

Where it all comes from Learnwhere every rule comes from, and who derived it from whom

Vulnerabilities

Vulnerabilitiesevery CVE, scored and marked: KEV, EPSS, exploits Patch TuesdayMicrosoft's monthly release, by update and product FeedsRSS, OPML and a KEV calendar for your reader

Scan

This browserads, trackers and filtering DNS, seen from this tab A domainmail, DNS and web posture, each record quoted A devicepaste what it runs, see which CVEs apply Your networkthe LAN resolver, from this server, daily Historyevery run, and what changed between them By handthe same checks done yourself, per platform

SearchSearch

Desk

Your fleet and your work Fleetyour releases and the hardware they run on Triagewhat needs a decision Watchlistthe products and platforms you run Saved searchesthe lists you come back to

This instance Sourceswhat is read, how often, under what terms Digestthe daily or weekly summary, and alerts

How it is drawn Appearancethe look and the colour scheme Brandingthe mark this instance wears

`1` Introduction

NIST PIV and digital identity SP 800-96
All changes in this version

first version loaded 1 Introduction

Title

Introduction

BaselineWatch 0.54.0 · a change register for the security standards themselves · how to read this site · source · health

This product uses the NVD API but is not endorsed or certified by the NVD. CVE is a registered trademark of The MITRE Corporation. Known Exploited Vulnerabilities Catalog provided by CISA. EPSS scores provided by FIRST. Package advisories from OSV.dev and the GitHub Advisory Database (CC-BY 4.0). CIS and Microsoft content is shown from your own copy under your own licence and is never redistributed. Article images belong to their publishers and link to the original story. AdFection / Candiru indicators are the Zero Breach project's (CC0), which is not affiliated with the researchers it cites. Canary names are quoted from EasyList and EasyPrivacy (GPLv3 or CC BY-SA 3.0) and from URLhaus by abuse.ch; they are only ever resolved, never loaded, and nothing here links to them. A source whose licence restricts display shows its entries to this instance's owner only.