Skip to content

Releases: dmrobbi/kevstig

kevstig v0.1.0 - KEV x STIG coverage checker

Choose a tag to compare

@dmrobbi dmrobbi released this 19 Oct 00:36

First public tagged release: a live routing table between the CISA
Known Exploited Vulnerabilities catalog and the DISA STIG baselines
Bedim Security maintains. Full VMware vSphere family (all versions),
Citrix, Microsoft Exchange/Outlook, RHEL 8/9; EOL RHEL 7 retired.
Scoreboard: 21 rows / 6,431 maintained STIG rules. Daily-refreshed
public page + static API.

Honest limits: routed is not remediated — the scoreboard counts
what the maintained baselines CAN address, not what is fixed;
counts drift by a row or so daily with the feed; it routes
platforms, not the inventory of a specific estate.

Full entry: CHANGELOG.md