Skip to content
T threat.cafe

Tag

#install-policy

1 post

  1. · Desmond Okafor-Hale · Original research and datasets · on threat.cafe

    When agent-skill scanners disagree: what conflicting verdicts on the same skill mean for your install policy

    In one census, auditors gave the same skill HIGH or CRITICAL and LOW or SAFE ratings on 1,233 listings, and 87.8% of listings had no audit at all. Treat conflict and absence of audit as separate policy states, not as a pass.