:root{
 --ground:#F4F6F8;--surface:#FFF;--surface-2:#EBEFF2;--line:#D7DEE3;--line-2:#BFCAD1;
 --ink:#101619;--ink-2:#465158;--ink-3:#74838C;
 --accent:#037BAC;--accent-2:#037BAC14;--accent-3:#037BAC2E;
 --navy:#083C5C;--navy-2:#0E5074;--cis-blue:#037BAC;--cis-cyan:#00A3E0;
 --good:#0ca30c;--crit:#d03b3b;--warn:#b8790a;--neut:#65737B;--vio:#6535B8;
 --good-b:#0ca30c1F;--crit-b:#d03b3b1F;--warn-b:#fab2192E;--neut-b:#65737B1F;--vio-b:#6535B81F;
 --sh:0 1px 2px #1016190F,0 6px 18px #10161908;
}
@media (prefers-color-scheme:dark){:root{
 --ground:#0A0E11;--surface:#121A1E;--surface-2:#19242A;--line:#25333A;--line-2:#33454E;
 --ink:#E2EAEE;--ink-2:#9DAFB9;--ink-3:#6C818D;
 --accent:#4FB3DE;--accent-2:#4FB3DE1C;--accent-3:#4FB3DE33;
 --navy:#062A40;--navy-2:#0E5074;--cis-blue:#4FB3DE;--cis-cyan:#00A3E0;
 --good:#48C285;--crit:#F26D60;--warn:#DFA23E;--neut:#8896A1;--vio:#A489EC;
 --good-b:#48C28522;--crit-b:#F26D6022;--warn-b:#DFA23E22;--neut-b:#8896A122;--vio-b:#A489EC22;
 --sh:0 1px 2px #0007,0 6px 18px #0005;
}}
*{box-sizing:border-box}
body{margin:0;background:var(--ground);color:var(--ink);font-size:14px;line-height:1.5;
 font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,sans-serif;-webkit-font-smoothing:antialiased}
.mono{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-variant-numeric:tabular-nums}
h1,h2,h3{margin:0;text-wrap:balance}
.eyebrow{font-size:9.5px;font-weight:600;letter-spacing:.11em;text-transform:uppercase;color:var(--ink-3)}
.wrap{max-width:1400px;margin:0 auto;padding:22px 22px 60px}
.hdr{background:var(--navy);border-bottom:3px solid var(--cis-cyan);position:sticky;top:0;z-index:30}
.hdr h1,.hdr .org{color:#fff}
.hdr .org{opacity:.72}
.hdr .in{max-width:1400px;margin:0 auto;padding:13px 22px;display:flex;align-items:center;gap:15px;flex-wrap:wrap}
.mark{height:28px;padding:0 10px;border-radius:5px;background:#fff;color:var(--navy);
 display:grid;place-items:center;font-weight:800;font-size:12px;letter-spacing:.06em}
.hdr h1{font-size:15.5px;font-weight:600;letter-spacing:-.01em}
.org{font-size:11.5px;color:var(--ink-3)}
.tsw{display:flex;align-items:center;gap:8px;padding:5px 10px;border:1px solid rgba(255,255,255,.22);
 border-radius:8px;background:rgba(255,255,255,.1)}
.tsw .eyebrow{color:rgba(255,255,255,.7)}
.tsw select{color:#fff}
.tsw select option{color:var(--ink);background:var(--surface)}
.tsw select{font:inherit;font-size:12.5px;border:0;background:transparent;color:var(--ink);font-weight:600;cursor:pointer}
nav{display:flex;gap:2px;margin-left:auto;flex-wrap:wrap}
nav button{font:inherit;font-size:12.5px;font-weight:500;padding:7px 13px;border-radius:7px;
 border:1px solid transparent;background:transparent;color:rgba(255,255,255,.82);cursor:pointer}
nav button:hover{background:rgba(255,255,255,.12);color:#fff}
nav button[aria-current=page]{background:#fff;color:var(--navy);font-weight:700}
:focus-visible{outline:2px solid var(--accent);outline-offset:2px}
.kpi{display:grid;grid-template-columns:repeat(auto-fit,minmax(150px,1fr));gap:1px;background:var(--line);
 border:1px solid var(--line);border-radius:11px;overflow:hidden}
.kpi.small{grid-template-columns:repeat(auto-fit,minmax(180px,1fr));max-width:520px;margin-bottom:16px}
.st{background:var(--surface);padding:15px 17px}
.st .n{font-size:28px;font-weight:600;letter-spacing:-.03em;line-height:1.05;font-variant-numeric:tabular-nums}
.st .l{font-size:10px;font-weight:600;letter-spacing:.08em;text-transform:uppercase;color:var(--ink-3);margin-top:4px}
.st .sub{font-size:11.5px;color:var(--ink-3);margin-top:5px}
.st.key{background:var(--accent-2)}
.crit{color:var(--crit)}.good{color:var(--good)}.warn{color:var(--warn)}
.grid2{display:grid;grid-template-columns:repeat(auto-fit,minmax(390px,1fr));gap:14px;margin-top:20px}
.card{background:var(--surface);border:1px solid var(--line);border-radius:11px;box-shadow:var(--sh);overflow:hidden}
.pad{padding:17px 19px}
.card h2{font-size:14px;font-weight:600}
.cap{font-size:11.5px;color:var(--ink-3);margin:4px 0 14px;max-width:64ch}
.sec{font-size:16px;font-weight:600;letter-spacing:-.01em}
.lead{font-size:12.5px;color:var(--ink-2);max-width:82ch;margin:5px 0 14px}
.hist{display:flex;align-items:flex-end;gap:3px;height:120px;margin-bottom:12px}
.hb{flex:1;display:flex;flex-direction:column;align-items:center;justify-content:flex-end;height:100%}
.hb i{display:block;width:100%;border-radius:4px 4px 0 0;min-height:2px}
.hv{font-size:10px;font-weight:600;color:var(--ink-2);height:14px}
.hx{font-size:10px;color:var(--ink-3);margin-top:4px}
.c-good{background:var(--good)}.c-crit{background:var(--crit)}.c-warn{background:var(--warn)}
.band{display:flex;height:20px;border-radius:4px;overflow:hidden;gap:2px;background:var(--surface-2)}
.band i{display:block}
.legend{display:flex;gap:14px;flex-wrap:wrap;font-size:11.5px;color:var(--ink-2);margin-top:10px}
.legend span{display:inline-flex;align-items:center;gap:6px}
.legend i{width:10px;height:10px;border-radius:2px;display:inline-block}
table{width:100%;border-collapse:collapse;font-size:12.5px}
thead th{background:var(--surface-2);text-align:left;padding:8px 12px;font-size:9.5px;font-weight:600;
 letter-spacing:.07em;text-transform:uppercase;color:var(--ink-3);border-bottom:1px solid var(--line);white-space:nowrap}
tbody td{padding:8px 12px;border-bottom:1px solid var(--line);vertical-align:middle}
tbody tr:last-child td{border-bottom:0}
tr.clickable{cursor:pointer}
tr.clickable:hover{background:var(--surface-2)}
table.tight tbody td{padding:6px 8px;border-bottom:1px solid var(--line)}
.ref{white-space:nowrap;color:var(--ink-2);font-size:11.5px}
.id{font-size:11px;color:var(--ink-2)}
.dim{color:var(--ink-3);font-size:11.5px}
.blast{display:flex;align-items:center;gap:9px;white-space:nowrap}
.blast i{height:9px;border-radius:3px;background:var(--crit);display:block}
.blast b{font-variant-numeric:tabular-nums;font-size:12px}
.score{font-weight:600}
.b-critical{color:var(--crit)}.b-at_risk{color:var(--warn)}.b-compliant{color:var(--good)}.b-none{color:var(--ink-3)}
.pill{display:inline-flex;align-items:center;gap:5px;font-size:11px;font-weight:600;padding:2.5px 8px;
 border-radius:4px;white-space:nowrap;text-transform:capitalize}
.pill::before{content:"";width:5px;height:5px;border-radius:50%;background:currentColor}
.s-pass,.s-reporting{color:var(--good);background:var(--good-b)}
.s-fail{color:var(--crit);background:var(--crit-b)}
.s-not-applicable,.s-never-reported{color:var(--neut);background:var(--neut-b)}
.s-manual-review,.s-stale{color:var(--warn);background:var(--warn-b)}
.s-error{color:var(--vio);background:var(--vio-b)}
.s-managed-non-compliant,.s-externally-managed{color:var(--vio);background:var(--vio-b)}
.dir{font-size:11px;font-weight:600;padding:2.5px 8px;border-radius:4px}
.d-regressed{color:var(--crit);background:var(--crit-b)}
.d-fixed{color:var(--good);background:var(--good-b)}
.d-changed{color:var(--neut);background:var(--neut-b)}
.tbar{display:flex;gap:8px;align-items:center;flex-wrap:wrap;margin-bottom:12px}
.tbar input,.tbar select{font:inherit;font-size:12.5px;padding:7px 10px;border:1px solid var(--line-2);
 border-radius:7px;background:var(--surface);color:var(--ink)}
.tbar input{flex:1;min-width:200px;max-width:420px}
.resolve{font:inherit;font-size:11.5px;font-weight:600;padding:5px 11px;border-radius:6px;
 border:1px solid var(--accent);background:var(--accent);color:#fff;cursor:pointer}
.noresolve{font-size:11px;color:var(--ink-3)}
.back{font:inherit;font-size:12px;font-weight:600;padding:5px 11px;border-radius:7px;
 border:1px solid var(--line-2);background:var(--surface);color:var(--ink-2);cursor:pointer;margin-bottom:12px}
.empty{padding:36px 20px;text-align:center;color:var(--ink-3);font-size:12.5px;max-width:70ch;margin:0 auto}
.cust{display:grid;grid-template-columns:repeat(auto-fill,minmax(270px,1fr));gap:12px}
.cc{background:var(--surface);border:1px solid var(--line);border-radius:10px;padding:15px 17px}
.cc.on{border-color:var(--accent);box-shadow:0 0 0 1px var(--accent)}
.cc .nm{font-size:13.5px;font-weight:600}
.cc .dm{font-size:11.5px;color:var(--ink-3);margin-top:1px}
.cc .dm.sp{margin-top:9px}
.cc .row{display:flex;justify-content:space-between;align-items:baseline;margin-top:11px}
.cc .ra{text-align:right}
.cc .sc{font-size:21px;font-weight:600;letter-spacing:-.025em;font-variant-numeric:tabular-nums}
.cc.add{border-style:dashed;display:flex;flex-direction:column;gap:9px}
.cc.add h3{font-size:13px;font-weight:600;color:var(--accent)}
.cc.add label{display:block;font-size:11px;font-weight:600;color:var(--ink-2)}
.cc.add input,.cc.add select{width:100%;font:inherit;font-size:12.5px;padding:6px 9px;margin-top:3px;
 border:1px solid var(--line-2);border-radius:6px;background:var(--surface);color:var(--ink)}
.btn{font:inherit;font-size:12.5px;font-weight:600;padding:8px 14px;border-radius:7px;cursor:pointer;
 border:1px solid var(--line-2);background:var(--surface);color:var(--ink)}
.btn.pri{background:var(--accent);border-color:var(--accent);color:#fff}
.hint{font-size:11px;color:var(--ink-3);margin:0;line-height:1.45}
.note{border:1px solid var(--line);border-left:3px solid var(--warn);background:var(--surface);
 border-radius:9px;padding:14px 17px;margin-top:20px}
.note h3{font-size:12.5px;font-weight:600;margin-bottom:6px}
.note p{margin:0;font-size:12px;color:var(--ink-2);line-height:1.6;max-width:88ch}
code{font-family:ui-monospace,Menlo,monospace;font-size:11px;background:var(--surface-2);padding:1px 4px;border-radius:3px}
section{margin-top:22px}

/* --- report card, asset detail, shared bar chart ------------------------- */
.gradewrap{display:flex;align-items:center;gap:16px;flex-wrap:wrap}
.grade{width:60px;height:60px;border-radius:12px;display:grid;place-items:center;
 font-size:30px;font-weight:800;letter-spacing:-.03em;color:#fff}
.g-A{background:#0ca30c}.g-B{background:#5c9c1f}.g-C{background:#b8790a}
.g-D{background:#d2691e}.g-F{background:#c0392b}.g-none{background:var(--neut)}
.cardrows{display:flex;flex-direction:column;gap:7px;margin-top:4px}
.cr{display:grid;grid-template-columns:1fr 68px 108px 30px;gap:10px;align-items:center;font-size:12.5px}
.cr .track{height:9px;border-radius:3px;background:var(--surface-2);overflow:hidden;display:flex}
.cr .track i{display:block;height:100%}
.cr .pass{background:var(--good)}.cr .fail{background:var(--crit)}
.cr .g{font-weight:700;text-align:center;border-radius:4px;font-size:11px;padding:2px 0;color:#fff}
.bars{display:flex;flex-direction:column;gap:8px}
.bar-row{display:grid;grid-template-columns:190px 1fr 64px;gap:10px;align-items:center;font-size:12px}
.bar-track{height:11px;border-radius:3px;background:var(--surface-2);position:relative;overflow:hidden}
.bar-track i{position:absolute;left:0;top:0;height:100%;border-radius:3px}
.bar-total{background:var(--cis-blue);opacity:.32}
.bar-fail{background:var(--crit)}
.bar-val{text-align:right;font-variant-numeric:tabular-nums;font-size:11.5px;color:var(--ink-2)}
.tabs{display:flex;gap:3px;border-bottom:1px solid var(--line);margin:14px 0 0}
.tabs button{font:inherit;font-size:12.5px;font-weight:600;padding:8px 14px;border:0;background:transparent;
 color:var(--ink-3);cursor:pointer;border-bottom:2px solid transparent;margin-bottom:-1px}
.tabs button[aria-selected=true]{color:var(--accent);border-bottom-color:var(--accent)}
.tabpane{display:none}.tabpane.on{display:block}
.kv{display:grid;grid-template-columns:repeat(auto-fit,minmax(210px,1fr));gap:11px}
.kv div{background:var(--surface-2);border-radius:7px;padding:9px 11px}
.kv .k{font-size:9.5px;font-weight:600;letter-spacing:.08em;text-transform:uppercase;color:var(--ink-3)}
.kv .v{font-size:12.5px;margin-top:2px;word-break:break-word}
.chips{display:flex;flex-wrap:wrap;gap:6px}
.chip2{font-size:11px;padding:3px 8px;border-radius:5px;background:var(--surface-2);
 border:1px solid var(--line);font-family:ui-monospace,Menlo,monospace}
.partial{border-left:3px solid var(--warn);background:var(--warn-b);border-radius:7px;
 padding:9px 12px;font-size:11.5px;color:var(--ink-2);margin-bottom:12px}

/* --- login ---------------------------------------------------------------- */
.loginbody{margin:0;min-height:100vh;background:
  radial-gradient(1200px 600px at 12% -10%, #1B3A63 0%, transparent 60%), var(--navy);
  color:#fff;display:grid;place-items:center;padding:32px 20px}
.loginwrap{display:grid;grid-template-columns:minmax(0,1.15fr) minmax(320px,384px);
  gap:56px;max-width:1080px;width:100%;align-items:center}
@media(max-width:900px){.loginwrap{grid-template-columns:1fr;gap:30px}}
.mark.big{height:38px;padding:0 13px;border-radius:6px;background:#fff;color:var(--navy);
  display:inline-grid;place-items:center;font-weight:800;font-size:15px;letter-spacing:.08em;margin-bottom:22px}
.loginpitch h1{font-size:34px;font-weight:700;letter-spacing:-.025em;line-height:1.15;max-width:17ch}
.loginpitch .tag{font-size:14.5px;line-height:1.6;color:rgba(255,255,255,.8);max-width:58ch;margin:14px 0 22px}
ul.pitch{list-style:none;padding:0;margin:0;display:flex;flex-direction:column;gap:11px}
ul.pitch li{position:relative;padding-left:26px;font-size:13.5px;line-height:1.55;
  color:rgba(255,255,255,.78);max-width:62ch}
ul.pitch li::before{content:"";position:absolute;left:0;top:7px;width:9px;height:9px;
  border-radius:2px;background:var(--cis-cyan)}
ul.pitch b{color:#fff;font-weight:600}
.loginpitch .fine{margin-top:24px;font-size:11.5px;color:rgba(255,255,255,.5);max-width:58ch}
.logincard{background:#fff;border-radius:14px;padding:30px 30px 24px;
  box-shadow:0 24px 60px rgba(0,0,0,.35);color:var(--ink)}
:root[data-theme="dark"] .logincard,
@media (prefers-color-scheme:dark){.logincard{background:#fff;color:#101619}}
.logincard h2{font-size:20px;font-weight:600;letter-spacing:-.01em;color:#101619}
.logincard .sub{font-size:12.5px;color:#5b6a73;margin:3px 0 20px}
.logincard label{display:block;font-size:11.5px;font-weight:600;color:#465158;margin:0 0 5px}
.logincard input{width:100%;font:inherit;font-size:14px;padding:10px 12px;margin-bottom:15px;
  border:1px solid #c7d0d6;border-radius:8px;background:#fff;color:#101619}
.logincard input:focus-visible{outline:2px solid var(--cis-blue);outline-offset:1px;border-color:var(--cis-blue)}
.btn.wide{width:100%;padding:11px;font-size:14px;background:var(--cis-blue);border-color:var(--cis-blue);color:#fff}
.logincard .fine{margin:16px 0 0;font-size:11px;color:#77868c;line-height:1.5}
.loginerr{background:#fdeaea;border:1px solid #f0b4b4;color:#8d2020;border-radius:8px;
  padding:9px 12px;font-size:12.5px;margin-bottom:15px}
.signout{font:inherit;font-size:12px;font-weight:500;padding:6px 11px;border-radius:7px;
  border:1px solid rgba(255,255,255,.25);background:transparent;color:rgba(255,255,255,.85);cursor:pointer}
.signout:hover{background:rgba(255,255,255,.12);color:#fff}

/* --- CIS attribution -----------------------------------------------------
   The CIS logo identifies whose BENCHMARKS this measures against. It is never
   the product's own mark: putting it where ConfigShield's identity goes would
   read as "CIS built this", which is not true. Hence a labelled attribution
   chip, and the disclaimer beside it on the login page. */
/* The CIS mark is the product's own brand. It sits on a white chip because the
   official SVG is navy-on-transparent and would disappear into the navy header. */
.brandmark{display:inline-grid;place-items:center;background:#fff;border-radius:6px;
  padding:5px 9px;flex:none}
.brandmark img{height:30px;width:auto;display:block}
.brandmark.big{padding:11px 16px;border-radius:9px;margin-bottom:24px}
.brandmark.big img{height:62px}

/* --- section matrix ------------------------------------------------------
   Rows are top-level benchmark sections, columns their subsections. The layout
   follows the numbering rather than a curated taxonomy, so it stays correct when
   a benchmark edition adds or renumbers sections. */
.matwrap{overflow-x:auto}
.matgrid{display:flex;flex-direction:column;gap:5px;min-width:640px}
.matrow{display:grid;grid-template-columns:172px 1fr 56px;gap:10px;align-items:center}
.matlabel{font-size:11.5px;line-height:1.25;overflow:hidden}
.matlabel b{display:inline-block;min-width:20px;font-size:13px;font-weight:700;color:var(--ink)}
.matlabel span{color:var(--ink-3);display:block;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
.matcells{display:flex;flex-wrap:wrap;gap:3px}
.cell{width:52px;height:38px;border-radius:5px;display:flex;flex-direction:column;
  align-items:center;justify-content:center;gap:1px;cursor:default;color:#fff;
  transition:transform .1s}
.cell:hover{transform:scale(1.08)}
.cell b{font-size:10px;font-weight:700;letter-spacing:-.01em}
.cell i{font-size:9px;font-style:normal;opacity:.85}
.matscore{font-size:11.5px;font-weight:700;text-align:center;padding:5px 0;border-radius:5px;color:#fff}
/* Six steps, matching the report-card grade thresholds. */
.h-0{background:#b3261e}.h-1{background:#c9532a}.h-2{background:#c98a17}
.h-3{background:#9aa61c}.h-4{background:#4f9c2d}.h-5{background:#1a7a4c}
.h-none{background:var(--surface-2);color:var(--ink-3)}
.matkey{display:flex;align-items:center;gap:5px;margin-top:12px;font-size:11px;color:var(--ink-3)}
.matkey i{width:22px;height:10px;border-radius:2px;display:inline-block}
.matkey span:first-child{margin-right:3px}