Changelog
A running record of what moves on this site. I started it because I kept losing track of what I had changed and when, and git log is not much help when the message is three words long.
How this is kept
Every entry below is a change I made myself. Newest first, grouped by the day it landed. The list lives in a plain data file next to the page, so adding a line is all it takes when I ship something. Anything from before this page existed is still sitting in the repository history, and I have not tried to reconstruct it here because I would only be guessing at the dates.
I am not going to dress this up as a release log. It is a maintenance note to myself, published because it is useful to anyone who wants to know whether a page changed under them.
8 October 2026
- Added Navigation
Feedback page
A feedback form at /feedback with two fields, a subject and the message itself, linked from the footer. The page is static, so it posts the message to a form relay, which sends it on to the inbox registered with the relay: the address is held there and never appears in the page.
7 October 2026
- Added Tools
Pattern Explorer
An explorer for security architecture patterns: a search box, three filters, and a card per pattern carrying the architectural concern it covers, the NIST SP 800-53 Rev. 5 controls mapped to it, the threats it addresses and the patterns it relates to, with the control identifiers joined to the Rev. 5 catalogue held on this site. The pattern library it will show is still being assembled, so the explorer is in place and empty for now.
- Added Navigation
Dark mode
A light and dark toggle in the header. It remembers your choice, and follows the system setting until you pick one.
1 October 2026
- Added Tools
Copy CCI numbers from the 800-53 explorer
A copy button above the CCI list on each control in the 800-53 explorer that puts the numbers on the clipboard, one per line.
30 September 2026
- Added Tools
Two more ISM releases in the explorer
The June 2026 (2026.06.18) and September 2026 (2026.09.4) Information Security Manual releases, pulled from the ASD ACSC ISM OSCAL repository. September is now the default, so the explorer opens on the current release. The version dropdown and the comparison picker carry all five releases from July 2025 onward, and a deep link such as ?version=jun26 now loads the release it names, which it previously did not on a statically built page.
- Added Tools
Five more DISA benchmarks
The Traditional Security Checklist plus four more Security Requirements Guides: General Purpose Operating System, Web Server, Database, and Application Server. All five come from the DISA XCCDF benchmarks and are mapped through their CCIs to SP 800-53 Rev 5 controls. The Traditional Security Checklist is the exception, since DISA publishes it with legacy V-IDs only and no CCI references, so it carries no control chips.
- Added Systems security engineering
How to guides, starting with allocation
A how to series for the engineering tasks where security work lands. The first guide is written, on allocating security controls to system elements, and the remaining eight are listed greyed out as in progress.
27 September 2026
- Changed Systems security engineering
The page is now a portal
The process tables moved to their own page at /systems-security-engineering/process. The main page is now a starting point with a short overview, cards into the process reference, the guides and the RMF timeline, and the publication list it all comes from.
19 September 2026
- Changed Tools
STIGs and SRGs are rows now
The five benchmark cards on the tools page were taking up most of the page. They are compact single line rows now, each with the benchmark type, the name and a link.
30 August 2026
- Added Systems security engineering
RMF timeline
The seven Risk Management Framework steps of SP 800-37 Rev 2 with the SP 800-160 Vol 1 processes that feed each one, built from the process references the framework prints on its own RMF tasks. Linked from the systems security engineering page.
14 August 2026
- Added Navigation
Changelog and engineering icons in the sidebar
A new systems security engineering item in the main menu, and a changelog icon pinned directly above the GitHub link. Both are icon only, so the hover text carries the label.
21 June 2026
- Added Tools
CSEIG Explorer
Search the ten Cyber Survivability Attributes, see the CSEIG exemplar statement for each, and the SP 800-53 Rev 5 controls MITRE maps onto them. Built from MITRE MTR210700R1 Appendix C Table 17.
19 April 2026
- Added Tools
CCI Explorer
Search any DISA CCI by number or by keyword. Returns the definition, the Rev 5 and Rev 4 control mappings, every STIG finding the CCI sits inside, and related CCIs you can click through.
5 March 2026
- Added Systems security engineering
The systems security engineering process
The thirty life cycle processes from NIST SP 800-160 Vol 1 Rev 1, sorted into their four process groups. Each one shows its security purpose and the tasks underneath, copied from the publication. Initial draft: September 2024. Still being worked on, so the page is only half done.
24 February 2026
- Added Navigation
This changelog
The page you are reading. Started so there is one place to record what moves on the site instead of digging through git log for it.
Provenance
DERIVED. The dates, areas and groupings on this page come from the
entries in src/data/changelog.ts, which I write by hand. The count in
the header is computed from that list at build time. Nothing here is quoted from a
publication, so there is no QUOTED side to this block.