Quantitative, reproducible scoring of security configuration risk (CCSS / NISTIR 7502), with attack-chain detection. CASPAR is the reference implementation.
Declarative OS hardening (formerly Stratum / stratumoss) — turn a YAML blueprint into a CIS/STIG-benchmarked, multi-cloud golden image. Apache-2.0, automation- and AI-agent-friendly.
Compiles STIG and SCAP output into schema-valid FedRAMP 20x vulnerability reports, with every response clock read from FedRAMP's published rules dataset
Declarative OS hardening (formerly Stratum / stratumoss) — turn a YAML blueprint into a CIS/STIG-benchmarked, multi-cloud golden image. Apache-2.0, automation- and AI-agent-friendly.
