Security

The fleet’s security posture pages: EDR (Microsoft Defender — VM-only, for kernel-sensor reasons — plus Nessus, and who is armed where) and the firewall architecture (the layered model from campus edge to per-host nftables).

Deliberately not on this site: current-gap enumerations, audit findings, port matrices, and credential-custody specifics. Those stay in operator-only notes; the published pages describe the architecture, not the soft spots.