AttackLedger

介紹

Proves what a security test covered: a hash-chained evidence ledger with signed, timestamped receipts and reports anyone can verify.

翻譯準備中

取自儲存庫 README

README

正在載入完整 README。 以下為已儲存的摘錄。

Prove what was tested. An evidence system for offensive security. AttackLedger runs recon and testing engagements (bug bounty, penetration tests, internal assessments) and records every test as evidence in a tamper-evident ledger. Coverage is a computed result backed by receipts. It can be mapped to the controls auditors ask about, such as PCI DSS 11.4, ISO 27001 A.8.8 and DORA testing requirements. The core rule is borrowed from audit practice: