Issue

1) The overview page uses different colours to rate the outcome of a scan. Running a test for the first time will cause a "red" status if the system is not compliant. Running the same test again will report "green", meaning: "No change compared to the last test". The usual meaning of green is "Everything is ok", which is a completely different message. There are two possible solutions that I see for this:

a) Use different status colours for "no change since the last test" and "Full compliance"

b) Add a feature to define "exceptions", where you can define that a certain server may fail for a certain set of rules. If there is any rule for which there is no exception and the system is not compliant to this rule, the status will be red, otherwise green. (Some competitors implement this feature. There, you can even set a time limit for exceptions)