From c6a8ea67684beca33e3683db420cde6562d359e6 Mon Sep 17 00:00:00 2001 From: PARTH ROHIT Date: Sun, 6 Sep 2026 03:24:14 +0100 Subject: [PATCH 1/2] docs: refresh Learn statistics on current dev Signed-off-by: parthrohit22 --- README.md | 8 ++++---- docs/learn/index.html | 48 ++++++++++++++++++++++--------------------- 2 files changed, 29 insertions(+), 27 deletions(-) diff --git a/README.md b/README.md index b3f2cdd3..f0f5783e 100644 --- a/README.md +++ b/README.md @@ -59,10 +59,10 @@ Findings map to NIST FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA | Feature | Description | |---|---| -| **Misconfiguration Scanner** | Runs 95 Azure security rules across storage, network, identity, database, compute, Key Vault, AKS, post-quantum cryptography, backup, serverless, private endpoint, and supply chain posture | +| **Misconfiguration Scanner** | Runs 126 Azure security rules across storage, network, identity, database, compute, Key Vault, AKS, post-quantum cryptography, backup, serverless, private endpoint, and supply chain posture | | **Compliance Mapper** | Maps findings to CIS Benchmarks, NIST CSF, ISO 27001, and SOC 2 framework JSON files | | **Scan History API** | Stores scans and findings in PostgreSQL and exposes findings, score, scan history, compliance posture, drift, and resource inventory over REST | -| **Remediation Playbooks** | Every rule ships with a matching Azure CLI remediation script (95 playbooks) | +| **Remediation Playbooks** | Every rule ships with a matching Azure CLI remediation script (126 playbooks) | | **Security Dashboard** | Full React dashboard deployed on Vercel - live monitoring, findings, compliance, drift, prioritization, and AI-layer views | | **Project Website** | Documentation and reference site at [openshield-org.github.io/openshield](https://openshield-org.github.io/openshield/) - blog, rules gallery, architecture, evidence guides, roadmap, and releases | | **Sentinel Integration** | Normalises findings and pushes them into Microsoft Sentinel via a Log Analytics custom table and KQL analytics rules | @@ -104,11 +104,11 @@ Project policies and assurance evidence: flowchart TD A["React Dashboard\nVercel · Live"] B["Flask REST API\nJWT · CORS · Blueprints"] - C["Scanner Engine\n95 Python rules"] + C["Scanner Engine\n126 Python rules"] D["Azure Subscription\nScanned via Azure SDK + Graph"] E["Compliance Framework JSON\nCIS · NIST · ISO 27001 · SOC 2"] F["PostgreSQL Database\nFindings · Scans"] - G["Azure CLI Playbooks\n95 remediation scripts"] + G["Azure CLI Playbooks\n126 remediation scripts"] H["sentinel/ingest.py\nNormalise + HMAC upload"] I["Microsoft Sentinel\nOpenShieldFindings_CL · KQL rules"] diff --git a/docs/learn/index.html b/docs/learn/index.html index 891f19ef..2ec54153 100644 --- a/docs/learn/index.html +++ b/docs/learn/index.html @@ -498,7 +498,7 @@ .severity { display: grid; - grid-template-columns: repeat(3, 1fr); + grid-template-columns: repeat(4, 1fr); gap: 12px; margin-top: 16px; } @@ -523,6 +523,7 @@ font-weight: 900; } + .critical strong { color: #f87171; } .high strong { color: #fecaca; } .medium strong { color: #fed7aa; } .low strong { color: #bbf7d0; } @@ -752,7 +753,7 @@

Learn Azure security posture with OpenShield.

openshield scan --subscription Azure

-

loading rules: 95 dynamic checks

+

loading rules: 126 dynamic checks

enrichment: NVD / CVE intelligence

storage: PostgreSQL scan history

api: Flask + JWT + CORS

@@ -764,11 +765,11 @@

Learn Azure security posture with OpenShield.
-
95Azure scan rules
-
95CLI remediation playbooks
+
126Azure scan rules
+
126CLI remediation playbooks
4Compliance frameworks
8AI security skills
-
58High-severity checks
+
82High-severity checks
@@ -821,7 +822,7 @@

Production-shaped, MVP-friendly architecture

Azure SubscriptionResources and configuration
Scanner EnginePython rule execution
-
Rule Evaluation95 dynamic checks
+
Rule Evaluation126 dynamic checks
CVE EnrichmentNVD risk context
PostgreSQLFindings and scan history
Flask APIJWT-protected REST routes
@@ -841,9 +842,9 @@

Production-shaped, MVP-friendly architecture

Rule coverage

-

95 Azure security rules

+

126 Azure security rules

- OpenShield currently has 95 dynamic rules. The strongest contributor work improves rule accuracy, reduces false positives, + OpenShield currently has 126 dynamic rules. The strongest contributor work improves rule accuracy, reduces false positives, strengthens validation, or improves remediation quality.

@@ -851,19 +852,19 @@

95 Azure security rules

Coverage by category

-
Network
23
-
Identity
15
-
Security Operations
10
-
Supply Chain
8
-
KeyVault
6
-
Kubernetes
6
-
Serverless
5
-
Storage
5
-
Backup
4
-
Compute
4
-
Database
4
-
PostQuantum
3
-
Data Link
2
+
Network
35
+
Identity
25
+
Security Operations
10
+
Supply Chain
8
+
KeyVault
6
+
Kubernetes
6
+
Compute
5
+
Serverless
5
+
Storage
9
+
Backup
4
+
Database
8
+
PostQuantum
3
+
Data Link
2
@@ -871,8 +872,9 @@

Coverage by category

Severity distribution

Most checks are high severity. That makes validation important: high-severity false positives damage trust quickly.

-
58HIGH
-
31MEDIUM
+
3CRITICAL
+
82HIGH
+
37MEDIUM
4LOW
From 5aaab487275d372b17fb2e0f93ee8bc8c768ea12 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Sun, 6 Sep 2026 02:24:23 +0000 Subject: [PATCH 2/2] docs: refresh learn page and README statistics [skip ci] Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --- docs/learn/index.html | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/learn/index.html b/docs/learn/index.html index 2ec54153..9e966cb7 100644 --- a/docs/learn/index.html +++ b/docs/learn/index.html @@ -855,14 +855,14 @@

Coverage by category

Network
35
Identity
25
Security Operations
10
+
Storage
9
+
Database
8
Supply Chain
8
KeyVault
6
Kubernetes
6
Compute
5
Serverless
5
-
Storage
9
Backup
4
-
Database
8
PostQuantum
3
Data Link
2