PAGES
← all tools
◆ Compliance Automation & Trust Management

Mondoo

Mondoo 14.0 is out! commercial

Mondoo is a security platform that continuously scans and assesses infrastructure, cloud environments, and software supply chains for vulnerabilities and misconfigurations.

Summary

Mondoo is a commercial compliance-automation platform delivered as a hosted service that continuously scans cloud, infrastructure, and application assets against security policies and benchmarks like CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline., then scores findings using its Risk Dimensions model. It's aimed at compliance owners and security teams who need to report posture upward rather than just track it internally, since it can turn live vulnerability management data into board-ready Executive Reports exportable to PowerPoint or PNG. Coverage extends into IaCIaCInfrastructure as Code: the practice of defining and provisioning compute infrastructure through machine-readable config files rather than manual processes, giving cyber tools repeatable, version-controlled environment setup. scanning for Terraform and CloudFormationCloudFormationAn AWS service that lets you describe and provision cloud infrastructure as declarative YAML or JSON templates, so a cyber tool can reproducibly spin up or tear down its entire AWS environment with a single API call., cloud internet-exposure detection, and shadow AI detection, alongside ongoing expansion of its MQLMQLA query language created by Microsoft for hunting across telemetry in Microsoft 365 Defender, letting cyber tools express complex behavioral detections in a structured, readable syntax. query language and policy checks. With 17 releases in the tracked window and the most recent 81 days ago, it shows steady, active development.

Mondoo is a security platform that continuously scans and assesses infrastructure, cloud environments, and software supply chains for vulnerabilities and misconfigurations.

How Mondoo helps

Which of my cloud assets are reachable from the internet and shouldn't be?

scans cloud environments for internet-exposed resources and surfaces the attack surface an outside attacker would actually see, not just what's misconfigured internally

Which of my vulnerabilities should I actually fix first?

scores findings through a five-dimension risk model that factors in things like known ransomware use, then attaches remediation context so the priority list comes with next steps

Am I running software or operating systems that are past end of life?

flags end-of-life operating systems and legacy assets directly in the posture view so they don't hide among routine findings

Which of my Terraform or CloudFormation templates would fail a benchmark before I ever apply them?

runs IaC scanning against Terraform and CloudFormation variants and checks them against CIS and other benchmarks before the resources are provisioned

Is anyone in my org standing up AI infrastructure or tools without security's knowledge?

inspects for AI infrastructure and shadow AI usage across the environment and reports it as part of the scanned asset inventory

What do I actually tell leadership about our security posture this quarter?

turns live vulnerability management data into board-ready Executive Reports that export directly to PowerPoint or PNG for presentation

all 21 features, with the evidence for each →

Languages

Not documented

Features

21 capabilities across 2 capability groups

Built from Mondoo's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

  • Mondoo covers 1 of the 11 endpoint investigation and controls capabilities we track.

What Mondoo offers you

  • Command-line interface3
  • CSV data export1
  • Kubernetes-native deployment1
  • MCP server1
  • Natural-language query1
Security baseline assessment 3 features Endpoint investigation and controls since 2024
Policy and compliance checks shipped Runs CIS benchmarks, compliance framework checks, and a broad library of security policy checks across supported platforms. 23 releases · first seen Apr 2025

Shared capability: Security baseline assessment

release 23 total

  • Adds six new out-of-the-box policies. Mondoo screenshot Mondoo 14.0 is out! · Sep 2026 · source · release history
  • Six new out-of-the-box policies included by default Mondoo 14.0 is out! · Sep 2026 · source · release history
  • Introduces the uk-cyber-essentials-v3_3 framework for compliance checking against the UK Cyber Essentials standard Mondoo Release Highlights September 2026 · Sep 2026 · source · release history
  • Adds support for the UK Cyber Essentials v3.3 compliance framework Mondoo Release Highlights September 2026 · Sep 2026 · source · release history
  • Integrates nearly 30 new CIS Benchmarks and STIG policies into the compliance assessment framework Mondoo Release Highlights August 2026 · Aug 2026 · source · release history
  • Adds 145 new compliance/security checks to identify vulnerabilities across supported environments. Mondoo Release Highlights June 2026 · Jun 2026 · source · release history
Infrastructure as code (IaC) scanning shipped Scans Terraform, CloudFormation, and other infrastructure-as-code files for security misconfigurations before deployment. 7 releases · 1 other source · first seen Jul 2024

Shared capability: Security baseline assessment

release 7 total

  • Adds a unified IaC provider that discovers and scans every kind of infrastructure-as-code in a repository. Mondoo screenshot Mondoo 14.0 is out! · Sep 2026 · source · release history
  • Support for OpenTofu infrastructure-as-code scanning Mondoo 14.0 is out! · Sep 2026 · source · release history
  • Adds first-class OpenTofu scanning. Mondoo 14.0 is out! · Sep 2026 · source · release history
  • Expands infrastructure as code (IaC) scanning scope with new checks and improved coverage Mondoo Release Highlights April 2026 · Apr 2026 · source · release history
  • Expands infrastructure as code (IaC) scanning coverage. Mondoo Release Highlights April 2026 · Apr 2026 · source · release history
  • Supports IaC scanning for Terraform and CloudFormation variants. Mondoo Release Highlights March 2026 · Mar 2026 · source · release history

example

  • Scan an infrastructure repository including OpenTofu files. mondoo iac scan . Mondoo 14.0 is out! · Sep 2026 · source
Post-quantum cryptography readiness assessment shipped Assesses readiness for post-quantum cryptographic standards across 26 platforms. 2 releases · first seen Jul 2026

Shared capability: Security baseline assessment

release

  • Adds post-quantum cryptography readiness assessment across 26 platforms. Mondoo Release Highlights July 2026 · Jul 2026 · source · release history
  • Adds post-quantum cryptography readiness checks across 26 platforms Mondoo Release Highlights July 2026 · Jul 2026 · source · release history
MCP server 1 feature Interfaces and integrations since 2025
AI-assisted exploration via MCP server shipped Exposes Mondoo spaces, findings, and policies to AI clients such as Claude Desktop so users can explore results through natural language queries. 4 releases · 1 other source · first seen Apr 2025

Shared capability: MCP server

Also counts toward: MCP server, Natural-language query

release

  • New hosted MCP server lets AI tools (Claude Desktop, Claude Code, VS Code) connect to Mondoo using a read-only API token. Connect Claude and other AI tools to Mondoo with the MCP server · seen Jul 2026 · source · release history
  • Enables natural-language exploration of Mondoo spaces, findings, and policies directly from AI-powered clients. Connect Claude and other AI tools to Mondoo with the MCP server · seen Jul 2026 · source · release history
  • Adds mondoo-mcp-server as a transport layer enabling AI agents (Claude Desktop, Claude Code, VS Code) to query hosted Mondoo spaces, findings, and policies via natural language using a read-only API token. Connect Claude and other AI tools to Mondoo with the MCP server · Jul 2026 · source · release history
  • Adds a Mondoo Model Context Protocol (MCP) server to enable AI accelerated findings remediation Mondoo Release Highlights April 2025 · Apr 2025 · source · release history

example

  • Connect Claude Desktop to your hosted Mondoo instance to ask questions about your infrastructure compliance state. ``` { "mcpServers": { "mondoo": { "url": "https://<your-mondoo-instance>/api/mcp", "headers": { "Authorization": "Bearer <read-only-api-token>" } } } } ``` Connect Claude and other AI tools to Mondoo with the MCP server · Jul 2026 · source
Other / not yet classified 17 features Features we have not matched to a capability yet. A suggested match is marked.
Mondoo Query Language (MQL) shipped suggested Provides a purpose-built query language that lets users write custom policies and security checks against supported resources. 15 releases · 1 other source · first seen Aug 2025

Suggested capability: Security baseline assessment. This is our guess, not confirmed.

release 15 total

  • Adds cross-version MQL support so queries work across different resource schema versions. Mondoo screenshot Mondoo 14.0 is out! · Sep 2026 · source · release history
  • Adds 500+ new MQL resources covering Windows, IIS, MDM, and EDR surfaces. Mondoo 14.0 is out! · Sep 2026 · source · release history
  • Adds OCSF, InSpec, and CSV scan output formats.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Mondoo 14.0 is out! · Sep 2026 · source · release history
  • Introduces MQL strict mode for tighter query validation. Mondoo 14.0 is out! · Sep 2026 · source · release history
  • Cross-version MQL support allows queries to run across different runtime versions without modification Mondoo 14.0 is out! · Sep 2026 · source · release history
  • --output-format inspec enables InSpec-compatible JSON/JSONL output Mondoo 14.0 is out! · Sep 2026 · source · release history

example

  • Run MQL queries with strict type checking to catch errors early. mondoo scan --strict -q 'windows.process { name }' Mondoo 14.0 is out! · Sep 2026 · source
Remediation guidance shipped Pairs each finding with remediation steps and automation snippets for tools such as Ansible, Bash, and Terraform. 13 releases · 1 other source · first seen Mar 2025

release 13 total

  • Adds SecurityScorecard findings as a native data source within Mondoo assessments Mondoo Release Highlights September 2026 · Sep 2026 · source · release history
  • Enables AI-driven remediation suggestions for vulnerabilities fixable via configuration changes Mondoo Release Highlights September 2026 · Sep 2026 · source · release history
  • Adds remediation context alongside findings to help practitioners prioritize and act on issues. Mondoo Release Highlights May 2026 · May 2026 · source · release history
  • Expands remediation content across policies. Mondoo Release Highlights March 2026 · Mar 2026 · source · release history
  • Includes guided remediation steps alongside vulnerability findings to accelerate patching. Mondoo Release Highlights November 2025 · Nov 2025 · source · release history
  • Makes advisory remediations easier to access. Mondoo Release Highlights September 2025 · Sep 2025 · source · release history

example

  • Investigate specific cloud resource configurations via the API to automate remediation workflows. GET /api/v2/resources/{resource_id}/findings Mondoo Release Highlights February 2026 · Feb 2026 · source
Vulnerability detection shipped Detects known vulnerabilities across operating systems, applications, and infrastructure components. 14 releases · first seen Mar 2025

release 14 total

  • Increases scan throughput by up to 5x through internal performance optimizations Mondoo Release Highlights August 2026 · Aug 2026 · source · release history
  • Adds post-quantum cryptography readiness assessment across 26 platforms. Mondoo Release Highlights July 2026 · Jul 2026 · source · release history
  • Expands vulnerability coverage to include nearly 100 additional desktop and server applications. Mondoo Release Highlights July 2026 · Jul 2026 · source · release history
  • Adds post-quantum cryptography readiness checks across 26 platforms Mondoo Release Highlights July 2026 · Jul 2026 · source · release history
  • Expands vulnerability detection coverage across infrastructure. Mondoo Release Highlights February 2026 · Feb 2026 · source · release history
  • Broadens the scope of vulnerability detection across infrastructure Mondoo Release Highlights February 2026 · Feb 2026 · source · release history
Multi-platform asset scanning shipped Scans a wide and growing range of operating systems and platforms from a single tool. 13 releases · first seen Jul 2024

release 13 total

  • Adds MDM and EDR resources for endpoint management. Mondoo screenshot Mondoo 14.0 is out! · Sep 2026 · source · release history
  • Adds precise OS detection for 15 more operating systems, with deep Solaris, FreeBSD, and SUSE 16 support. Mondoo 14.0 is out! · Sep 2026 · source · release history
  • Adds 500+ new MQL resources, including deep coverage for Windows, IIS, Solaris, FreeBSD, and SUSE 16 Mondoo 14.0 is out! · Sep 2026 · source · release history
  • New MDM and EDR resources for endpoint management capabilities Mondoo 14.0 is out! · Sep 2026 · source · release history
  • Adds three new SaaS platforms to supported integrations for security checking. Mondoo Release Highlights July 2026 · Jul 2026 · source · release history
  • Adds support for six new platforms expanding cloud and infrastructure coverage. Mondoo Release Highlights June 2026 · Jun 2026 · source · release history
Cloud security scanning shipped suggested Inspects cloud resources and configurations for misconfigurations, internet exposure, and AI infrastructure risks. 12 releases · first seen Feb 2026

Suggested capability: Security baseline assessment. This is our guess, not confirmed.

release 12 total

  • Cloud scans optimized to make up to 97% fewer API calls Mondoo screenshot Mondoo 14.0 is out! · Sep 2026 · source · release history
  • Reduces cloud scan API call volume by up to 97%. Mondoo 14.0 is out! · Sep 2026 · source · release history
  • Adds support for 22 new cloud infrastructure providers in the scanning engine Mondoo Release Highlights August 2026 · Aug 2026 · source · release history
  • Extends supported provider list with 22 new cloud platforms including Oracle Cloud Infrastructure and Alibaba Cloud for multi-cloud posture assessment Mondoo Release Highlights August 2026 · Aug 2026 · source · release history
  • Adds 357 new cloud and SaaS security checks to the detection engine. Mondoo Release Highlights July 2026 · Jul 2026 · source · release history
  • Adds internet-exposure detection across cloud environments to surface attacker-visible attack surface. Mondoo Release Highlights June 2026 · Jun 2026 · source · release history
Executive Reports shipped Produces board-ready presentations from live vulnerability data and exports them to PowerPoint or PNG. 8 releases · 4 other sources · first seen Apr 2026

release 8 total

  • Supports export of individual report slides to PowerPoint or PNG formats. Executive Reports is in Preview · seen Jul 2026 · source · release history
  • Enables Executive Reports for all customers, turning live Mondoo vulnerability management data into board-ready presentations. Executive Reports is generally available · seen Jul 2026 · source · release history
  • New Executive Reports feature (Preview) converts live Mondoo vulnerability management data into board-ready ROI presentations. Executive Reports is in Preview · seen Jul 2026 · source · release history
  • Supports export of Executive Report slides to PowerPoint and PNG formats. Executive Reports is generally available · seen Jul 2026 · source · release history
  • General availability of the Executive Reports capability to all Mondoo customers Executive Reports is generally available · Jun 2026 · source · release history
  • New executive reports provide leadership-ready summaries of security posture. Mondoo Release Highlights May 2026 · May 2026 · source · release history

example

  • Generate a board-ready VM report and export it as a PowerPoint deck for stakeholder presentations. In the Mondoo console, navigate to Executive Reports, select your report, and choose Export > PowerPoint or Export > PNG. Executive Reports is generally available · seen Jul 2026 · source
  • When you need to present vulnerability program ROI to leadership, use Executive Reports to generate and export polished slides directly from live Mondoo data. In the Mondoo console, navigate to Executive Reports (Preview) and select Export to download slides as PowerPoint or PNG. Executive Reports is in Preview · seen Jul 2026 · source
  • Generate a board-ready vulnerability management chapter and export slides as PowerPoint files for stakeholders. In the Mondoo console, navigate to Executive Reports to generate the VM chapter and export each slide to PowerPoint or PNG. Executive Reports is generally available · Jun 2026 · source
  • Generate a board-ready presentation of vulnerability ROI data for executive review. In the Mondoo console, navigate to Executive Reports (Preview) and select 'Export to PowerPoint' or 'Export to PNG'. Executive Reports is in Preview · Apr 2026 · source
Analytics and custom reporting shipped Provides a self-serve analytics module with built-in and custom reports, configurable data pivots, and PowerPoint or PNG export. 9 releases · 1 other source · first seen Jul 2026

release 9 total

  • Export individual report pages as PNG images or full reports as PowerPoint decks for stakeholder sharing. Analytics Brings Self-Serve Reporting to the Console · seen Jul 2026 · source · release history
  • Includes seven built-in reports covering key security metrics out of the box. Analytics Brings Self-Serve Reporting to the Console · seen Jul 2026 · source · release history
  • New Analytics module is generally available in the Mondoo console, offering self-serve exploration of live security data. Analytics Brings Self-Serve Reporting to the Console · seen Jul 2026 · source · release history
  • Supports configurable pivots to slice and dice security data across different dimensions. Analytics Brings Self-Serve Reporting to the Console · seen Jul 2026 · source · release history
  • Enables creation of custom reports tailored to specific organizational needs. Analytics Brings Self-Serve Reporting to the Console · seen Jul 2026 · source · release history
  • Adds seven built-in analytical reports for Mondoo security data Analytics Brings Self-Serve Reporting to the Console · Jul 2026 · source · release history

example

  • Share a full security posture report with leadership by exporting it as a PowerPoint deck directly from the Analytics module. In the Mondoo console, go to Analytics, open a built-in or custom report, then select Export > Download as PowerPoint. Analytics Brings Self-Serve Reporting to the Console · seen Jul 2026 · source
Risk prioritization shipped Scores findings across five risk dimensions and flags factors such as known ransomware association to help teams decide what to fix first. 9 releases · 1 other source · first seen Feb 2025

release 9 total

  • Risk Dimensions transparent five-dimension scoring model Mondoo Release Highlights May 2026 · May 2026 · source · release history
  • Introduces Risk Dimensions, a transparent five-dimension scoring model for risk assessment Mondoo Release Highlights May 2026 · May 2026 · source · release history
  • Introduces Risk Dimensions, a transparent five-dimension scoring model for evaluating security risk. Mondoo Release Highlights May 2026 · May 2026 · source · release history
  • Remediation context for risks Mondoo Release Highlights May 2026 · May 2026 · source · release history
  • Delivers redesigned dashboards surfacing risk data through the new scoring model. Mondoo Release Highlights May 2026 · May 2026 · source · release history
  • Improves scoring accuracy for End-of-Life (EOL) assets Mondoo Release Highlights January 2026 · Jan 2026 · source · release history

example

  • Configure specific assets as high priority in Mondoo dashboards via the UI. In the Mondoo console, go to Integrations > CrowdStrike and enable the connection. Then navigate to Settings > Priority Assets and define your custom rules. Mondoo Release Highlights February 2025 · Feb 2025 · source
Findings management shipped Lets users list, filter, and navigate all findings and resource-level results across their asset inventory. 8 releases · first seen Feb 2025

release 8 total

  • Automatic client updates on Windows via new managed update mechanisms Mondoo screenshot Mondoo 14.0 is out! · Sep 2026 · source · release history
  • Ingests and displays SecurityScorecard findings directly within Mondoo Mondoo Release Highlights September 2026 · Sep 2026 · source · release history
  • Introduces resource-level findings for cloud assets. Mondoo Release Highlights February 2026 · Feb 2026 · source · release history
  • Introduces resource-level granularity for cloud security findings Mondoo Release Highlights February 2026 · Feb 2026 · source · release history
  • Streamlines listing and filtering of findings. Mondoo Release Highlights September 2025 · Sep 2025 · source · release history
  • Simplified filtering on findings to narrow audit scopes Mondoo Release Highlights July 2025 · Jul 2025 · source · release history
Software supply chain scanning shipped Identifies NPM packages and other third-party software supply chain components that introduce dependency risks. 4 releases · first seen Nov 2025

Also counts toward: Command-line interface

release

  • Adds container scanning that identifies and names hardened base images. Mondoo screenshot Mondoo 14.0 is out! · Sep 2026 · source · release history
  • Hardened base image detection in container scanning reports Mondoo 14.0 is out! · Sep 2026 · source · release history
  • Adds xgrep subcommand for terminal-based software supply chain scanning Mondoo Release Highlights September 2026 · Sep 2026 · source · release history
  • Enhances NPM package detection to strengthen software supply chain security. Mondoo Release Highlights November 2025 · Nov 2025 · source · release history
MCP security scanning shipped suggested Scans Model Context Protocol servers for security issues specific to AI integration infrastructure. 2 releases · 1 other source · first seen Sep 2025

Suggested capability: Security baseline assessment. This is our guess, not confirmed.

Also counts toward: Command-line interface

release

  • --output-format ocsf enables Open Compliance and Security Framework output Mondoo screenshot Mondoo 14.0 is out! · Sep 2026 · source · release history
  • Introduces experimental MCP (Model Context Protocol) security scanning. Mondoo Release Highlights September 2025 · Sep 2025 · source · release history

example

  • Export scan results in Open Compliance and Security Framework format for SIEM integration. mondoo scan --output-format ocsf <target> Mondoo 14.0 is out! · Sep 2026 · source
Network security scanning shipped suggested Scans network assets and configurations to identify network-level security weaknesses. 3 releases · first seen Nov 2025

Suggested capability: Security baseline assessment. This is our guess, not confirmed.

release

  • Adds network security scanning capabilities. Mondoo Release Highlights March 2026 · Mar 2026 · source · release history
  • Adds network security scanning capabilities to the platform. Mondoo Release Highlights March 2026 · Mar 2026 · source · release history
  • Introduces new network security detection capabilities. Mondoo Release Highlights November 2025 · Nov 2025 · source · release history
GitHub integration shipped suggested Ingests and applies security checks across all repositories in an organization. 2 releases · first seen Sep 2026

Suggested capability: Security baseline enforcement. This is our guess, not confirmed.

Also counts toward: Command-line interface

release

  • Introduces GitHub integration that applies xgrep checks across all repositories in an organization Mondoo Release Highlights September 2026 · Sep 2026 · source · release history
  • Adds the xgrep subcommand to secure your software supply chain from the terminal directly into every repository via a new GitHub integration Mondoo Release Highlights September 2026 · Sep 2026 · source · release history
Kubernetes scanning support shipped Provides dedicated Kubernetes asset tracking and auditing via a Kubernetes Operator. 2 releases · first seen Mar 2026

Also counts toward: Kubernetes-native deployment

release

  • Enables AI workloads to be treated as first-class assets with dedicated asset tracking. Mondoo Release Highlights July 2026 · Jul 2026 · source · release history
  • Introduces the Mondoo Kubernetes Operator with a complete rewrite Mondoo 13.0 is out! · Mar 2026 · source · release history
Shadow AI detection shipped Identifies unauthorized or unmanaged AI services running inside an environment. 2 releases · first seen Apr 2026

release

  • Introduces shadow AI detection capabilities to identify unauthorized AI tools in the environment Mondoo Release Highlights April 2026 · Apr 2026 · source · release history
  • Adds shadow AI detection capabilities. Mondoo Release Highlights April 2026 · Apr 2026 · source · release history
Data export formats shipped Exports scan findings and assessment data in multiple standardized formats including OCSF, InSpec, and CSV for integration with external systems. 1 release · first seen Sep 2026

Also counts toward: CSV data export

release

  • --output-format csv enables CSV export for scan results Mondoo screenshot Mondoo 14.0 is out! · Sep 2026 · source · release history
Security advisories shipped Publishes advisories that alert users to newly discovered vulnerabilities and emerging threats relevant to their environment. 1 release · first seen Nov 2025

release

  • Adds new Mondoo Security Advisories to surface emerging threats. Mondoo Release Highlights November 2025 · Nov 2025 · source · release history

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Command line

1 command for Mondoo, each with where it came from. This tool has no source analysis yet, so there is no option reference and no captured run beside them.

Source

Screenshots

From the release notes, newest first. Click one to see it full size.

Mondoo 14.0 is out! Sep 22, 2026

Score card

  1. Shipping velocity releases a month, last 12 months
  2. Documentation quality release-notes rubric, 0–100
  3. Breaking-change discipline how rarely a release breaks users, and notice given
  4. Maintenance risk quiet time against its own cadence, maintainers
  5. Innovation & surface new capabilities, API and MCP surface

Five scores for Mondoo, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.

Score cards are part of every paid plan.

See plans →

Each score is 0–100 on a published rubric, derived from data this site already shows. A dimension we cannot measure says so — it is never scored 0 and never enters a rank.

How this is scored
  • Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
  • Documentation quality — the release-notes rubric published on the analytics page, unchanged.
  • Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
  • Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
  • Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
  • Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
  • Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
  • Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.

Release-note detail over time

See how much detail Mondoo puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Releases

36 entries

  1. September 20262
  2. August 20261
  3. July 20267
  4. June 20263
  5. May 20262
  6. April 20263
  7. March 20263
  8. February 20262
  9. January 20261
  10. November 20251
  11. October 20252
  12. September 20252
  13. August 20252
  14. July 20251
  15. April 20251
  16. March 20251
  17. February 20251
  18. July 20241

    36 entries

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    browse all tools → score card for your toolchain →