Official Benchmark Scorecards¶

Auditors must publish results using the standard scorecard layout validated by schemas/scorecard.schema.json.

UHBS is vendor-neutral: decoy classes and protocols are the normative vocabulary. Named products appear only as evaluation proof (not requirements or endorsements). The three scorecards below are sanitized fixtures from live Docker lab runs; full artifacts and tutorials live under Conformance lab reports.

Examples¶

Published full UHBS-Lab scorecards (evaluated 2026-07-27):

Scorecard	Class / protocol	UHQS	Grade	Fixture
Web-API / HTTP decoy (ESPot proof)	Web-API · HTTP `:9200`	63.33	D	`espot-web-api.scorecard.json`
Low-Interaction / PJL decoy (miniprint proof)	Low-Interaction · PJL `:9100`	50.43	D	`miniprint-low-interaction.scorecard.json`
ICS-SCADA / Modbus decoy (Conpot proof)	ICS-SCADA · Modbus `:5020`	55.4	D	`conpot-ics-scada.scorecard.json`
Low-Interaction / SSH decoy (Cowrie proof)	Low-Interaction · SSH `:2222`	61.37	D	`cowrie-ssh.scorecard.json`
Low-Interaction / Telnet decoy (Cowrie proof)	Low-Interaction · Telnet `:2223`	64.90	D	`cowrie-telnet.scorecard.json`
OpenCanary HTTP	Web-API · HTTP :80	66.02	D	`opencanary-web-api.scorecard.json`
OpenCanary FTP	Low-Interaction · FTP :21	61.5	D	`opencanary-ftp.scorecard.json`
OpenCanary SSH	Low-Interaction · SSH :2222	35.64	F	`opencanary-ssh.scorecard.json`
OpenCanary TELNET	Low-Interaction · Telnet :23	64.9	D	`opencanary-telnet.scorecard.json`
OpenCanary REDIS	Low-Interaction · Redis :6379	53.72	D	`opencanary-redis.scorecard.json`
OpenCanary MYSQL	Low-Interaction · MySQL :3306	62.96	D	`opencanary-mysql.scorecard.json`
OpenCanary RDP	Low-Interaction · RDP :3389	61.01	D	`opencanary-rdp.scorecard.json`
OpenCanary SIP	Low-Interaction · SIP :5060	46.44	F	`opencanary-sip.scorecard.json`
OpenCanary SNMP	Low-Interaction · SNMP :161	47.42	F	`opencanary-snmp.scorecard.json`
OpenCanary NTP	Low-Interaction · NTP :123	47.42	F	`opencanary-ntp.scorecard.json`
OpenCanary TFTP	Low-Interaction · TFTP :69	47.42	F	`opencanary-tftp.scorecard.json`
OpenCanary VNC	Low-Interaction · VNC :5900	61.99	D	`opencanary-vnc.scorecard.json`
OpenCanary GIT	Low-Interaction · Git :9418	62.96	D	`opencanary-git.scorecard.json`
OpenCanary SMB	Low-Interaction · SMB :445	57.72	D	`opencanary-smb.scorecard.json`
Low-Interaction / SSH tarpit (Endlessh proof)	Low-Interaction · `ssh_tarpit` `:2222`	54.07	D	`endlessh-low-interaction.scorecard.json`
Beelzebub HTTP	Web-API · HTTP `:8080`	66.02	D	`beelzebub-http.scorecard.json`
Beelzebub SSH	Low-Interaction · SSH `:2222`	45.74	F	`beelzebub-ssh.scorecard.json`
Beelzebub Telnet	Low-Interaction · Telnet `:23`	47.89	F	`beelzebub-telnet.scorecard.json`
Beelzebub Redis	Low-Interaction · Redis `:6379`	55.55	D	`beelzebub-redis.scorecard.json`
Trapster HTTP	Web-API · HTTP `:8080`	63.33	D	`trapster-http.scorecard.json`
Trapster SSH	Low-Interaction · SSH `:2222`	30.24	F	`trapster-ssh.scorecard.json`
Trapster FTP	Low-Interaction · FTP `:2121`	49.71	F	`trapster-ftp.scorecard.json`
Trapster Telnet	Low-Interaction · Telnet `:2323`	64.9	D	`trapster-telnet.scorecard.json`
Dionaea FTP	Low-Interaction · FTP `:21`	55.30	D	`dionaea-ftp.scorecard.json`
Dionaea HTTP	Web-API · HTTP `:80`	43.54	F	`dionaea-http.scorecard.json`
Dionaea SMB	Low-Interaction · SMB `:445`	54.07	D	`dionaea-smb.scorecard.json`

Each page links to the matching report hub (quick/ + full/ scorecards, report.json, methodology, tutorial).

Synthetic layout sample (not a lab run)¶

Illustrative POSIX-Shell / GenAI-Augmented Decoy — vendor-neutral layout sample only (evaluated 2026-07-26)

Badge Snippets¶

After an official evaluation, maintainers can embed:

![UHBS v4.2.2 Grade A](https://img.shields.io/badge/UHBS%20v4.2.2-Grade%20A-brightgreen)
![UHBS v4.2.2 Grade B](https://img.shields.io/badge/UHBS%20v4.2.2-Grade%20B-yellowgreen)
![UHBS v4.2.2 Grade C](https://img.shields.io/badge/UHBS%20v4.2.2-Grade%20C-yellow)
![UHBS v4.2.2 Grade D](https://img.shields.io/badge/UHBS%20v4.2.2-Grade%20D-orange)
![UHBS v4.2.2 Grade F](https://img.shields.io/badge/UHBS%20v4.2.2-Grade%20F-red)

Submitting a Scorecard¶

Complete a TPS profile.yaml
Run the five-phase audit
Emit a scorecard conforming to the schema
Open a PR or issue using the Profile / Scorecard Submission template

Validate a published fixture locally:

uhbs validate-scorecard docs/conformance/fixtures/espot-web-api.scorecard.json --strict
uhbs validate-scorecard docs/conformance/fixtures/miniprint-low-interaction.scorecard.json --strict
uhbs validate-scorecard docs/conformance/fixtures/conpot-ics-scada.scorecard.json --strict
uhbs validate-scorecard docs/conformance/fixtures/cowrie-low-interaction.scorecard.json --strict
uhbs validate-scorecard docs/conformance/fixtures/endlessh-low-interaction.scorecard.json --strict
uhbs validate-scorecard docs/conformance/fixtures/opencanary-web-api.scorecard.json --strict