We elevated our compliance solution 

We've reworked the Compliance Hub to make it easier to start and manage audits with Mondoo:

• A new welcome page helps you pick your very first framework.

• We added descriptions to help you choose from our ever-growing list of out-of-the-box compliance frameworks.

• To make it easier to manage in-progress audits, we introduced preview and active states for audits. Only frameworks in those states display in Compliance Hub, which makes it easier to find what you need.

• Reworked framework pages include helpful descriptions, a simpler progress indicator, and a quick selector to control the state of an audit. We also replaced the check distribution graph with intuitable icons for each exception state.

• Data exports now include compliance control references, so you can feed compliance evidence collected by Mondoo into external data analytics systems.
• We added an introductory letter to compliance reports that informs your auditor about Mondoo. The PDF explains who we are and how we collect evidence, and lets auditors know how to contact us if they have questions.

An exciting month for new and improved policies

We built seven brand-new policies in August:

• Mondoo Shodan Security policy for critical, public-facing domains and IP addresses includes checks to identify open ports and vulnerabilities as reported by the Shodan network scanning service.
• Mondoo NTLMv1 Audit policy detects the vulnerable Microsoft NTLMv1 authentication protocol so you can ensure you're using only secure authentication methods.
• Mondoo SMBv1 Audit policy detects Microsoft's Server Message Block to be sure your file and device sharing doesn't use this insecure protocol. 
• Mondoo Dockerfile Security policy enables you to secure your container workloads before they run in production.
• CIS AWS Database Services Benchmark policy secures your most valuable business data in Amazon's most popular database services, including Aurora, DynamoDB, ElastiCache, Neptune, RDS, and Timestream.
• Mondoo AWS GuardDuty policy includes checks to ensure that GuardDuty is properly enabled and configured for EC2, EKS, IAM, Lambda, and S3 security.
• Mondoo AWS IAM Access Analyzer policy helps you secure access to critical resources by verifying that IAM Access Analyzer is enabled and properly configured.

We gave existing policies some major updates as well:

• The new 2.0 release of CIS benchmarks for AlmaLinux, Oracle Linux, Rocky Linux, and Red Hat Enterprise Linux 9 includes 630 total changes, including dozens of all-new recommendations to keep your systems secure. These policies passed the rigorous CIS benchmark validation process, so are certified to secure even the most complex enterprise Linux installations.‍
• Mondoo HTTP Security policy now includes checks to ensure Server, X-AspNetMvc-Version, X-AspNet-Version, X-Powered-By, and Public-Key-Pins HTTP headers are not set.‍
• CIS Azure Foundations Benchmark policy gained eight new checks as well as filter and query improvements.‍
• Mondoo Endpoint Detection and Response (EDR) policy now supports Cortex XDR.‍
• AWS Operational Best Practices policy includes improved S3 bucket permission checks.

Expanded resources for querying your environment

Get to the point quickly with an improved user experience

We never stop working to make it easier for you to access the information you need in the Mondoo Console. In August that meant making these improvements:

• We changed how links work on affected asset pages: They go directly to the asset result instead of the main asset page.  Now you can spend your time remediating findings instead of searching for them.
• Advisories now include an overall risk score that takes into account the blast radius and Mondoo-identified risk factors. This helps you better understand the criticality of vendor advisories.

• This month's updates to the Kubernetes integration page include a pre-populated namespace filter to skip scanning the operator itself and a simpler flow for enabling or disabling workload image scanning.
• We made case creation easier for our customers with large numbers of Jira projects: We now support fetching large project lists and we added a new project selection page that includes quick, text-based filtering.

Deeper AWS security insights

When a default VPC is in place, the Mondoo AWS serverless integration now produces deeper security scans that include:

• Individual assets for common AWS resources
• Improved query outputs

Use these improved scan results to navigate security issues in organization and space dashboards and to set granular exceptions on individual resources.

Audit your Mondoo usage

Improved audit logging provides better tracking of changes to your Mondoo organization and spaces. New events recorded in the Mondoo Console audit log include:

• Policies or frameworks enabled
• Policies or frameworks disabled
• Policies or frameworks put in preview
• Risk factor configuration changes
• Integrations created
• Integrations deleted
• Space settings modified
• Registration tokens created
• API tokens created
• Compliance reports generated
• Custom policy or framework uploads

‍