This project is a security compliance tool and configuration auditor designed to evaluate Docker deployments against industry security benchmarks. It functions as a script-based scanner that identifies misconfigurations and vulnerabilities within both the host operating system and container settings.
The tool specifically implements the Center for Internet Security standards for Docker to verify host and container configurations. It enables a hardening workflow by comparing system states against these standards to identify security gaps and document compliance status.
The audit engine supports modular test filtering to target specific security domains and generates reports in both plain text and JSON formats. These exports allow audit results to be used for human review or integrated into external security monitoring systems.