CONTEXT RUNTIMEDEMOThis demo app is plugged into Context Runtime, which optimizes which rule-family evidence to pull — correct remediation vs cost (3.56 vs 2.46). learn more →
Agentic Compliance
agent active · core: OpenSCAP connecteddata: live from OpenSCAPOpen report ↗
Summit Roofing Co. · core: OpenSCAP (open-source compliance scanner)
· profile: CIS Ubuntu Linux 22.04 LTS — Level 1 Server
Continuous control monitoring on a real OpenSCAP core — CIS Ubuntu benchmark scanned on Summit's server, with a human in the loop before any fix is applied.
6 failingpolicy_changeTop finding [MEDIUM]: Enforce Usage of pam_wheel with Group Parameter for su Authentication (+5 more). The agent can stage a remediation, but applying system fixes is approval-gated (never auto-applied).
Control pass rate
96%
134 scored controls
Passing controls
128
CIS rules met
Failing controls
6
need remediation
Open findings
7
6 technical · 1 license/insurance
Control posture
Framework status
data: live from OpenSCAP
CIS Ubuntu Linux 22.04 LTS — Level 1 Server96%
128 passing · 6 failing · 264 not applicable
Failing & expiring queue
real oscap findings
Control / item
Source
Severity
Status
Enforce Usage of pam_wheel with Group Parameter for su Authentication
CIS
MEDIUM
FAIL
Ensure All Files Are Owned by a Group
CIS
MEDIUM
FAIL
Ensure the Default Bash Umask is Set Correctly
CIS
MEDIUM
FAIL
Ensure the Default Umask is Set Correctly in /etc/profile
CIS
MEDIUM
FAIL
Install pam_pwquality Package
CIS
MEDIUM
FAIL
Verify permissions of log files
CIS
MEDIUM
FAIL
General Liability insurance · expires 2026-09-08
INSURANCE
MEDIUM
56d
Summit Roofing Co. Compliance · Assistant
Ask about SCAP findings and how to fix them — or kick off a fresh scan.