zNextScan 0.1.1

zNextScan 0.1.1 — refinements, expanded coverage, and full documentation on top of 0.1.0.

What's new since 0.1.0

• Mythos catalog expanded 39 → 42 controls (now ~37 scriptable checks). Composite controls bind multiple checks; 3 new controls migrate previously-orphaned MRRA checks (RACF audit logging, dataset-protection hardening, backup infrastructure).
• External recon (MYT-R02) live-validated + hardened — GitHub queries now use user:/org: scoping (precise, not free-text); proper rate-limit handling (honours x-ratelimit-reset, bounded budget). Still off by default and triple-gated.
• Production safety guide — new docs/safe-use.md: read-only guarantees, z/OSMF-API-only mode, and the exact RACF to create a least-privilege read-only scan user.
• Documentation sweep — all guides refreshed to current state (architecture, command-reference, parsers, config, compatibility), README reorganized with a clear quickstart and every doc linked.
• Packaging fix — the offline CVE map (data/cve_map.json) now ships as package data (MYT-V02 works on a pip installed copy).

All scriptable checks (and the gated recon) are live-validated against z/OS 3.1. 257 tests.

License

PolyForm Noncommercial 1.0.0 — non-commercial use only.

Install

pip install ".[pdf]"
znextscan scan --profile mythos --method hybrid -H host -u user

zNextScan 0.1.0

zNextScan 0.1.0 — read-only mainframe security & frontier-AI readiness scanner for IBM Z.

Two assessment profiles (--profile)

• mrra (default) — 32 ransomware-readiness checks across NIST CSF dimensions.
• mythos — 42-control frontier-AI ("Mythos"-class) readiness catalog, ~37 scriptable checks + a workshop questionnaire: readable operational-code surface, source/component exposure, hours-scale patch currency, MFA framework, immutable backup, USS hardening, API glass-box, SMF→SIEM, and the first Respond/Recover controls.

Highlights

• z/OSMF + SSH + hybrid connections (console + TSO + USS).
• Reports: JSON, HTML, PDF, Excel — plus a Mythos questionnaire (Excel + JSON/CSV) and redaction-capable ZIP evidence bundles.
• Authorization-gated external exposure recon (off by default).
• Data-driven parsers, graceful degradation (z/OS V1R13–3.1, z/OSMF or SSH).
• Validated live against z/OS 3.1; 255 tests. Full, current documentation in docs/.

License

PolyForm Noncommercial 1.0.0 — non-commercial use only.

Install

pip install ".[pdf]"
znextscan scan --profile mythos --method hybrid -H host -u user