Skip to content

Compliance

Concepts

  • Rule templates — per-vendor rule models; 52 built-in general rules cover credentials hygiene, insecure services, logging/AAA/SNMP/NTP baselines and more. Write your own rules per vendor.
  • Variable profiles — site-specific values (your NTP servers, syslog targets, ACL names) referenced by rules, so one rule set serves many environments.
  • Live-network baselines — extract current values from your real configs to bootstrap a baseline instead of writing it from scratch.

Scanning

Run scans network-wide or per group. Results show, per device and per rule: pass/fail, the offending lines, and when the violation first appeared (correlated with backup history). Failures can alert via webhooks.

Typical workflow

  1. Pick or adapt rule templates for each vendor in your network.
  2. Fill a variable profile with your environment's values (defaults are extracted from your live network).
  3. Scan → triage failures → fix on device → re-scan.
  4. Schedule periodic scans to catch regressions.

Compliance reads the backed-up configs — it never logs into devices separately.