cis-benchmark

Prowler is an Open Cloud Security tool for AWS, Azure, GCP and Kubernetes. It helps for continuos monitoring, security assessments and audits, incident response, compliance, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more.

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

Monkey365 provides a tool for security consultants to easily conduct not only Microsoft 365, but also Azure subscriptions and Microsoft Entra ID security configuration reviews.

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

Automated CIS Benchmark Compliance Remediation for RHEL 7 with Ansible

Run individual controls or full compliance benchmarks for CIS, PCI, NIST, HIPAA and more across all of your AWS accounts using Powerpipe and Steampipe.

Automated CIS Benchmark Compliance Remediation for RHEL 8 with Ansible

Windows OS Hardening with PowerShell DSC

Simple command line tool to check for compliance against CIS Benchmarks

Ansible Role to Automate CIS v1.1.0 Ubuntu Linux 18.04 LTS, 20.04 LTS Remediation

Automated CIS Benchmark Compliance Remediation for Ubuntu 22 with Ansible

Automated CIS Benchmark Compliance Remediation for Ubuntu 20 with Ansible

Automated CIS Benchmark Compliance Remediation for RHEL 9 with Ansible

Automated CIS Benchmark Compliance Remediation for Windows Server 2019 with Ansible

GCP CIS 1.1.0 Benchmark InSpec Profile

This repository contains an Ansible Role for RHEL7 / CentOS based on the Center for Internet Security Benchmarks

Code examples for the AWS Security Blog post: How to use CI/CD to deploy and configure AWS security services with Terraform

Metrics and alarms for AWS security hub for the CIS standard

Manage, monitor and improve your cyber security posture.