Sweeps
Across all of these, where does it hold?
A Sweep tries one condition against every target in scope: every database, every certificate, every account, every site. One results table, with the targets it could not observe called out instead of counted as safe.
Sweep · every 6 h
Every business database has a backup from the last 24 hours
42
Tried
3
Missing a backup
33
Within window
6
Not observed
payroll-prodNo recent backupNewest backup is 31 h oldhr-recordsNo recent backupCopy never completed
expenses-euNo recent backupRetention set to 0 dayscrm-reportingNot observedNo read access to this vaultledger-prodWithin windowBacked up 2 h agobenefits-dbWithin windowBacked up 5 h agoSince the last run
Newly missing1
Still missing2
Fixed1
Newly found2
Not observed is reported as its own result, never counted as safe.
Outcomes
Every target, one of three.
Not observed is never safe.
Each target in a Sweep lands in exactly one outcome, with the reason attached.
Affected
The condition does not hold for this target. The reason and the owner come with it.
Clear
Tried and the condition holds. The value it observed is kept.
Not observed
Panaptico could not test this target, usually missing access. Shown as its own count, so coverage gaps stay visible.
Run over run
What changed since last time.
Compared by key, target by target.
Every finished Sweep is compared with the one before it, so a new problem never hides inside a familiar number.
Newly affected
Targets that were clear last run and are not now. Usually where to start.
Still affected
Known problems, with how long each has been open.
Resolved
Targets fixed since the last run, with when they cleared.
Newly found
Targets that joined the scope since last time, tried on their first run.
Scope
Scope comes from your systems.
Not a list someone maintains.
- 1Discover
Find every target
A collection step lists what's in scope from the source: every database in AWS and Azure, every certificate on your domains.
- 2Try
Test each one
The same condition runs against every target, read-only, from the hosted sandbox or your own runner.
- 3Group
Slice the results
By system, owner, tier, or region, so each team sees its own share of the table.
Examples
Sweeps teams run.
Wherever there are many of something.
Works with
The rest of the platform.
One record of what's true.
Stop sampling.
Try every one, every time.
Point a Sweep at a scope you already have. Panaptico finds the targets and returns one table you can act on.