This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls listed here https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf and more than 100 additional checks that help on GDPR, HIPAA and other security requirements.

Ansible playbook roles for security

Ansible role for Red Hat 7 CIS Baseline

Blue Team Scripts

Terraform module for creating alarms for tracking important changes and occurrences from cloudtrail.

Ubuntu CIS Hardening Ansible Role

Simple command line tool to check for compliance against CIS Benchmarks

Android Mobile Device Hardening

A command-line and ruby API of utilities, converters and tools for creating, converting and processing security baseline formats, results and data

Ansible CentOS 7 - CIS Benchmark Hardening Script

CIS CentOS Linux 7 Benchmark

Cloud Custodian Policies for Automated Amazon Resource Management

InSpec profile to validate your VPC to the standards of the CIS Amazon Web Services Foundations Benchmark v1.1.0

Bootstrap script for Amazon Linux to comply CIS Amazon Linux Benchmark v2.0.0

CentOS Bench for Security is a script that implements checks which follows the CIS CentOS Linux 7 Benchmark.

Windows10 hardening implemented in powershell for consumer or enterprise deployment

The Audit Test Automation Package gives you the ability to get an overview about the compliance status of several systems. You can easily create HTML-reports and have a transparent overview over compliance and non-compliance of explicit setttings and configurations in comparison to industry standards and hardening guides.

CIS Benchmarks for macOS Catalina

CIS for macOS 10.12 remediated with script and configuration profiles

A simple way to evaluate the security of your Kubernetes deployment against sets of best practices defined by various community sources

(WIP) A terraform / kitchen-terraform hardening baseline for the cis-aws-foundations-baseline

CIS Benchmark CentOS Linux

Official repository for Canonical Kubernetes Third Party Integration Documentation

Perform basic, useless, state, and secure checks on your kubernetes cluster

Ansible role for remediation of CIS benchmarks items, for Centos/RHEL 6 and 7