Data sources and versions
Last reviewed —
checks configurations against our own rules, and draws on the public data and published standards listed below. This page shows which edition of each one the product currently uses, how it is kept up to date, and the terms we use it under. It forms part of our terms (section 9A).
How to read this. Third-party data can be wrong, incomplete or late, and standards are revised. We update on a reasonable-efforts basis at the cadence shown, but there will always be a gap between a source changing and the product reflecting it. Always check the official source before relying on a result. See the disclaimer.
How updates reach you
| What | Hosted service | Self-hosted edition |
|---|---|---|
| Vulnerability data known-exploited CVEs, firmware support dates | Updated by us. Nothing for you to do. | Data packs, signed by us. The appliance checks our update server daily and installs them automatically by default. You can switch this to approve-first or off. |
| Review rules checks, standards mappings, converters | Updated by us with each release. | Rules packs, signed by us. Downloaded automatically, but an admin approves each one before it is switched on (default). Every pack is self-tested before it goes live, and can be rolled back in one click. |
| Software the appliance itself | Deployed by us. | Platform releases, signed by us. The console tells you when one is available. You apply it in your own maintenance window (backup, verify, apply, roll back if needed). Never applied automatically. |
| Threat intelligence Shodan, Have I Been Pwned | Not used. | Optional. Queried live with your own API keys, so always current. |
Isolated networks: turn automatic checks off and upload pack files by hand. The self-hosted edition only contacts our update server (the same address as licence checks), so one firewall rule covers both.
Notices
Changes to this page
We update this page when we move to a new edition of a standard, add or remove a source, or a source changes its terms. If a source's terms stop allowing our use, we may remove the related checks or mappings. Material changes for paying customers are announced in the release notes and, for the self-hosted edition, in the notes of the content pack that delivers them.
Product, vendor and standard names are trademarks of their owners and are used only to describe what the product checks against. We are not affiliated with or endorsed by any of them.