LRL Blog

Why Continuous Security Is the New Standard for Audit Readiness

hunt@lostrabbitlabs.com (Dave Hunt) — Thu, 01 Jan 2026 00:45:09 GMT

For years, organizations have treated security audits as annual events: a brief surge of activity, a frantic scramble for documentation, and a collective exhale once the auditor signs off. That pattern no longer fits the reality of modern threats, customer expectations, or regulatory requirements.

Audit readiness used to mean organizing evidence once a year. Today, it means demonstrating that your security program is alive, measurable, and operating continuously.

The shift is clear. Continuous security is rapidly becoming the new baseline for proving trust.

Lost Rabbit Labs Year-End Security Guide

hunt@lostrabbitlabs.com (Dave Hunt) — Wed, 10 Dec 2025 22:17:08 GMT

For Teams That Already Know the Basics

New Tool Release: LRL-SCAN

the Lost Rabbits — Fri, 14 Nov 2025 04:25:44 GMT

What is LRL-SCAN?

LRL-Scan (https://gitlab.com/lostrabbitlabs/lrl-scan) is a free open-source Vulnerability Scanner based off of Hacker Target's 'nmap-did-what' project (https://github.com/hackertarget/nmap-did-what). Our team has added improvements to the original schema, UI, and functionality by integrating SSLScan, Nuclei, NIST NVD lookups, and more. Perform full network, services, and vulnerability scanning on your network and discover hidden threats in your environment.

External Network vs. Internal Network scanning:
LRL-Scan is equipped to scan both public IPv4 addresses and the internal RFC1918 address space (along with hostnames and domain names). Running 'LRL-Scan' on an internal network will result in the collection of MAC Addresses which will be used to perform OUI Vendor lookups. In addition, mDNS hostname discovery is performed to find additional hostnames. Running 'LRL-Scan' on an external network will result in ASN & Geo Lookups that will be used to generate plots on the Grafana dashboard map.