Posture Report: Discovery, Baseline & Remediation-in-Progress

Tool stack: Tailscale (connectivity) · Wazuh (EDR & vulnerability module) · Action1 (patch management)

Prepared by the ShieldOps team

Oluwadarasimi Isreal

Temitayo Kara

Osumili Felix

Sampson Chinecherem Enyindah

Aderibigbe olalekan emmanuel

Kehinde Justinah Coker

Executive Summery

ShieldOps stood up a full endpoint protection and vulnerability management capability from a standing start of zero visibility. Prior to this program, no vulnerability scan had ever been run across the environment, patching was manual and untracked, and there was no endpoint detection capability of any kind.

Over the reporting window we established secure connectivity across all managed endpoints (Tailscale), deployed an EDR and vulnerability-scanning agent to every reachable endpoint (Wazuh), and stood up centralised patch management with a documented SLA policy (Action1). The initial scan immediately surfaced a large critical-severity backlog on the Ubuntu host, confirming the exposure the board was warned about.

As of this report, remediation is in progress but not yet complete: a patch deployment policy has been configured and an update cycle has been run, but a post-patch Wazuh re-scan has not yet been captured, so the critical/high vulnerability counts below still reflect the original baseline. This is called out explicitly rather than assumed away, closure will be confirmed once the re-scan evidence is captured. I

Asset Inventory

Wireshark was used to scan and discover devices on the network.

Consolidated view of all endpoints referenced across the three tool consoles:

Network Foundation (Tailscale)