CIS Benchmark Compliance Auditing Tools
Automated scanning utilities that verify system configurations against established CIS security benchmarks for infrastructure compliance.
CIS Benchmark Compliance Auditing Tools
Find the best repos with AI.We'll search the best matching repositories with AI.
- prowler-cloud/prowler
prowler-cloud/prowler
13,049View on GitHubProwler is an automated cloud infrastructure security scanner and posture management tool. It evaluates cloud environments and infrastructure-as-code templates against security benchmarks to identify misconfigurations, vulnerabilities, and compliance gaps that could compromise system integrity. The platform distinguishes itself through graph-based attack path analysis, which identifies chains of misconfigurations that create exploitable routes for unauthorized access. It utilizes a plugin-based execution model to perform state-based assessments of live environments and static analysis of conf
Prowler is a cloud infrastructure security scanner and posture management tool that checks environments against CIS benchmarks and provides compliance reporting across AWS, Azure, and GCP, directly matching your need for automated CIS benchmarking and compliance status reporting.
PythonCompliance Reporting - docker/docker-bench-security
docker/docker-bench-security
9,655View on GitHubThis project is a security compliance tool and configuration auditor designed to evaluate Docker deployments against industry security benchmarks. It functions as a script-based scanner that identifies misconfigurations and vulnerabilities within both the host operating system and container settings. The tool specifically implements the Center for Internet Security standards for Docker to verify host and container configurations. It enables a hardening workflow by comparing system states against these standards to identify security gaps and document compliance status. The audit engine suppor
docker/docker-bench-security is a script-based compliance scanner that audits Docker hosts and containers against CIS Docker benchmarks, providing automated scanning and compliance reporting—but its focus is limited to Docker environments rather than multi-platform system configurations.
ShellCIS Benchmark Implementations - cisofy/lynis
CISOfy/lynis
15,284View on GitHubLynis is an automated security auditing and system hardening framework designed for UNIX-based operating systems. It functions as a command-line utility that inspects local system configurations to identify security vulnerabilities, configuration weaknesses, and compliance gaps. By executing a series of modular tests, the tool generates actionable reports and remediation suggestions to assist in strengthening system defenses. The project distinguishes itself through a highly modular architecture that relies on shell-script-based execution and native system inspection. Users can define custom
Lynis is an automated security auditing and hardening tool that inspects system configurations, identifies compliance gaps against frameworks including CIS benchmarks, and generates actionable reports with remediation suggestions, directly meeting the need for a CIS benchmark compliance scanner and security configuration auditor.
ShellAutomated Security ScannersSecurity Auditing ToolsSecurity Testing and Auditing - alfresco/prowler
Alfresco/prowler
14,005View on GitHubProwler is a multi-cloud security posture management platform and vulnerability scanner. It provides tools for automating security audits, evaluating cloud infrastructure against regulatory compliance frameworks, and managing security assessments through a dedicated analysis dashboard. The project distinguishes itself by providing an AI-driven security context server that feeds structured data to AI assistants for automated risk analysis. It also employs graph-based attack path mapping to visualize potential lateral movement and exploitation routes across cloud inventories. The platform cove
Prowler automates security audits and evaluates cloud infrastructure against regulatory compliance frameworks including CIS benchmarks, providing automated scanning and compliance reporting that directly address this search for a CIS benchmark compliance scanner.
PythonCloud Security Posture ManagementAI Security Context ServersAI Security Data Providers - aquasecurity/kube-bench
aquasecurity/kube-bench
8,078View on GitHubkube-bench is a Kubernetes security benchmark scanner and configuration auditor. It verifies if a cluster adheres to the Center for Internet Security standards and other hardening guides to identify security misconfigurations and vulnerabilities. The tool operates as a containerized security scanner, utilizing host namespaces to analyze nodes and control plane components without requiring the installation of binaries directly on the host. It supports multiple Kubernetes distributions, applying environment-specific benchmarks to ensure auditing accuracy for managed services. The project cover
kube-bench automates checking Kubernetes clusters against CIS benchmarks and reports compliance status, fitting the CIS benchmark scanner category but limited to Kubernetes environments rather than general system configurations.
GoBenchmark ScanningSecurity ScanningCloud Compliance Auditors
