Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

Ansible role for Red Hat 7 CIS Baseline

Run individual controls or full compliance benchmarks for CIS, PCI, NIST, HIPAA and more across all of your AWS accounts using Powerpipe and Steampipe.

Windows OS Hardening with PowerShell DSC

Ansible role for Red Hat 8 CIS Baseline

Simple command line tool to check for compliance against CIS Benchmarks

Ansible role for Ubuntu22 CIS Baseline

Ansible role for Ubuntu 2004 CIS Baseline

CIS Baseline Ansible Role for Windows 2019

GCP CIS 1.1.0 Benchmark InSpec Profile

Ansible role for Red Hat 9 CIS Baseline

This repository contains an Ansible Role for RHEL7 / CentOS based on the Center for Internet Security Benchmarks

Code examples for the AWS Security Blog post: How to use CI/CD to deploy and configure AWS security services with Terraform

Metrics and alarms for AWS security hub for the CIS standard

Ansible CentOS 7 - CIS Benchmark Hardening Script

Manage, monitor and improve your cyber security posture.

KloudDB Shield is a security tool that checks for Postgres CIS Benchmarks - Postgres, MySQL and RDS