pci-dss

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

Wazuh - The Open Source Security Platform

Security automation content in SCAP, OSCAL, Bash, Ansible, and other formats

Wazuh - Ruleset

Wazuh - Docker containers

Wazuh - Kibana plugin

PCI-DSS compliant Debian 9/10 hardening

Run individual controls or full compliance benchmarks for CIS, PCI, HIPAA and more across all of your AWS accounts using Steampipe.

VULNRΞPO - Free vulnerability report generator and repository end-to-end encrypted. Complete templates of issues, CWE, CVE, MITRE ATT&CK, PCI DSS, AES encryption, Nmap/Nessus/Burp/OpenVAS issues import, Jira export, TXT/HTML/PDF report, attachments, automatic changelog, statistics, vulnerability management, Security report builder.

Wazuh - Ansible playbook

MCW Modern cloud apps

SIAC is an enterprise SIEM built on open-source technology.

Wazuh - Project documentation

A docker container for openvas

This is the Azure Kubernetes Service (AKS) Baseline Cluster for Regulated Workloads reference implementation as produced by the Microsoft Azure Architecture Center.

Wazuh - RESTful API

Wazuh - Tools for packages creation

Documentation for the Compliant Kubernetes project

Azure PCI PaaS Reference Architecture

Wazuh - Splunk app

Azure Security and Compliance Blueprint - automation pci-paas-webapp-ase-sqldb-appgateway-keyvault-oms

Wazuh - Amazon AWS Cloudformation

MCW Securing PaaS

Wazuh - Puppet module

VGS Collect iOS SDK

Wazuh - Chef cookbooks

docker modsecurity reverse proxy WAF based on nginx