Method
Evidence before claims.
Every assessment connects authorization, controls, results, and limitations to the version that was actually tested.
Request a Launch Check- 01
Authorize
Define objective, scope, environment, and stop conditions.
- 02
Plan
Select applicable controls and make exclusions explicit.
- 03
Execute
Combine reproducible checks with complementary analysis.
- 04
Review
Confirm relevant results and reject false precision.
- 05
Remediate
Keep finding, change, and residual risk connected.
- 06
Retest
Validate the change in a newly identified version.
Public coverage
Ten layers in five understandable groups.
01
Context and inventory
02
Code and supply chain
03
Identity and data
04
Dynamic validation
05
Infrastructure and recovery
A rating is not coverage.
Security rating describes observed posture. Confidence reflects evidence quality. Coverage shows how much of the applicable plan was executed.
