Prowler is an Open Cloud Security tool for AWS, Azure, GCP and Kubernetes. It helps for continuos monitoring, security assessments and audits, incident response, compliance, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more.

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

Monkey365 provides a tool for security consultants to easily conduct not only Microsoft 365, but also Azure subscriptions and Microsoft Entra ID security configuration reviews.

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

Ansible role for Red Hat 7 CIS Baseline

Run individual controls or full compliance benchmarks for CIS, PCI, NIST, HIPAA and more across all of your AWS accounts using Powerpipe and Steampipe.

Ansible role for Red Hat 8 CIS Baseline

Windows OS Hardening with PowerShell DSC

Ansible Role to Automate CIS v1.1.0 Ubuntu Linux 18.04 LTS, 20.04 LTS Remediation

Simple command line tool to check for compliance against CIS Benchmarks

Ansible role for Ubuntu22 CIS Baseline

Ansible role for Ubuntu 2004 CIS Baseline

CIS Baseline Ansible Role for Windows 2019

Ansible role for Red Hat 9 CIS Baseline

GCP CIS 1.1.0 Benchmark InSpec Profile

This repository contains an Ansible Role for RHEL7 / CentOS based on the Center for Internet Security Benchmarks

Code examples for the AWS Security Blog post: How to use CI/CD to deploy and configure AWS security services with Terraform

Metrics and alarms for AWS security hub for the CIS standard

Ansible CentOS 7 - CIS Benchmark Hardening Script