Choose the guide for this computer
This computer looks like …. Pick what you are securing and the official Department of Defense guide is downloaded for you.
I already have the file, or the download did not work
Drop the STIG file here
Every rule, in plain English
| Rule | Severity | What it asks of you | Kind | Watch out for |
|---|
Read every command before anything runs
A check is a read-only command. Nothing executes until you have read it and approved it under your own name. Approval freezes a fingerprint of the exact command; if it is edited afterwards the check is refused. Rows without a checkbox have no command — DISA asked for a GUI or an interview, or the text did not map to PowerShell. Those cannot be approved or scanned.
Scan this computer
A normal scan runs only approved, unmodified checks. The optional checkbox can include unreviewed checks; those results are marked untrusted and are not a normal approved scan. After the scan you get a plain-English remaining-risk headline, charts, and an honest coverage caveat — not a fake "percent secure."