1. A method, comprising: mapping dynamic addresses associated with network hosts to static identifiers associated with the network hosts; receiving results from a scan of the network hosts in heterogeneous formats; maintaining a reference map that maps an identifier of a test conducted by a first one of the network hosts to an identifier of a test conducted by a second one of the network hosts; identifying semantically equivalent results from the scan, based, at least in part, on the reference map; comparing at least a portion of the semantically equivalent results with a network policy to determine compliance with the network policy; and maintaining a history of compliance for each of the network hosts based on the static identifiers.