Preset Reference

overlay extends recommended0 direct rules

strict

Severity overlay for active security rules; paired with the recommended default rather than activating rules by itself.

Overlay preset: changes posture for already-active rules.

Coverage

Covered Rules

This preset does not directly activate any rules. It modifies the behavior of rules that are already active through membership presets.

What This Preset Enables

The strict preset is an overlay, not a membership bucket. It layers stricter severity posture on top of already-active rules, and by default that means the recommended default set.

When To Use It

Use it when you want already-active security rules to escalate more aggressively without silently enabling new rules.

Tradeoffs

This changes severity posture, so apply it deliberately and communicate the rollout expectation.