Pages in Reference

noust ens

Check this server against Spain's ENS (category MEDIUM) and write the evidence.

Reference Updated 29 October 2026 View as Markdown

Shell

noust ens [OPTIONS] COMMAND [ARGS]...

noust ens access-review

The periodic review of who may do what (op.acc.4.4).

Shell

noust ens access-review [OPTIONS] COMMAND [ARGS]...

Subcommands: attest, list

Record that you reviewed the list of accounts and roles (op.acc.4.4).

Shell

noust ens access-review attest [OPTIONS]

Option	What it does	Default
`--notes`	What was looked at and what was changed.	``
`--json`	Print what was recorded as JSON.
`--reason`	Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on.

Show every account, role, second factor and token, and past reviews.

Shell

noust ens access-review list [OPTIONS]

Option	What it does	Default
`--json`	Print the list and its digest as JSON.
`--reason`	Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on.

Compare this server with the ens-medium profile, measure by measure.

Shell

noust ens check [OPTIONS]

Option	What it does	Default
`--cached`	Reuse the last hardening checks instead of probing the server again (faster).
`--all`	Also show the checks that pass.
`--json`	Print the result as JSON.
`--reason`	Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on.

Each application's owner, criticality and classification (op.exp.1).

Shell

noust ens inventory [OPTIONS] COMMAND [ARGS]...

Subcommands: list, set

List the inventory, or export it as JSON or CSV for an auditor.

Shell

noust ens inventory list [OPTIONS]

Option	What it does	Default
`--format`	How to print it.	`table`
`-o`, `--output`	Write to this file (created 0600) instead of standard output.
`--json`	Same as --format json.
`--reason`	Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on.

Set an application's owner, criticality or classification.

Shell

noust ens inventory set [OPTIONS] DOMAIN

Arguments: domain

Option	What it does	Default
`--owner`	Who answers for it: a person, a team, a contact. Empty clears it.
`--criticality`	The category of the service it supports (ENS Anexo I).
`--classification`	How its information is handled (mp.info.2).
`--notes`	Anything else the organisation records.
`--json`	Print the entry as JSON.
`--reason`	Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on.

Show which security profile is on, and every value ens-medium fixes.

Shell

noust ens profile [OPTIONS]

Option	What it does	Default
`--json`	Print the profiles as JSON.
`--reason`	Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on.

Write the evidence bundle for an ENS auditor (JSON and Markdown, hashed).

Shell

noust ens report [OPTIONS]

Option	What it does	Default
`--output`	Directory to write the bundle to (default: ens-reports/ beside the store).
`--cached`	Reuse the last hardening checks.
`--json`	Print the report itself as JSON instead of writing files.
`--reason`	Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on.

Something on this page is wrong or unclear? Report it on GitHub.

Help, contributing and the project’s policies are under Project.