Continuous monitoring and what changed since the last scan

The first scan tells you where you stand. The second, and every one after it, tells you what broke yesterday.

A one-off report ages the day it is delivered. The real value shows up when Buteo runs again and compares: this certificate now expires in two weeks, this subdomain appeared on Friday and nobody asked for it, this DMARC policy stopped rejecting, this port opened. The diff engine distinguishes a change worth alerting on from noise that is not, because a system that warns about everything stops being read within a fortnight. Events are recorded, feed a history, and can go by email to whoever needs to know.

What Buteo audits

• ✓Scheduled scans at whatever frequency the plan allows
• ✓Run-to-run comparison, with what appeared, went away or changed severity
• ✓Alertable change separated from recurring noise
• ✓Email alerts and a notification centre
• ✓History and trend over time
• ✓Weekly digest for anyone who does not want to follow it daily