cis

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

Prowler is an Open Source Security tool to perform Cloud Security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains hundreds of controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.

Use SQL to instantly query your cloud services (AWS, Azure, GCP and more). Open source CLI. No DB required.

[WIP] 整理过去的分享，从零开始的Kubernetes攻防 🧐

The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.

An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

Ansible role for Red Hat 7 CIS Baseline

PCI-DSS compliant Debian 9/10 hardening

Open Source Cloud Security

Run individual controls or full compliance benchmarks for CIS, PCI, NIST, HIPAA and more across all of your AWS accounts using Steampipe.

Blue Team Scripts

Исчерпывающее руководство по приватности и контр-ОСИНТ для Рунета и всего СНГ 🇷🇺

Ansible Role to Automate CIS v1.1.0 Ubuntu Linux 18.04 LTS, 20.04 LTS Remediation

Terraform module for creating alarms for tracking important changes and occurrences from cloudtrail.

An open source, cloud-native asset inventory

Simple command line tool to check for compliance against CIS Benchmarks

Ansible role for Red Hat 8 CIS Baseline

Audit Windows Security with best Practice

This repository provides a security policies library that is used for securing Kubernetes clusters configurations. The security policies are created based on CIS Kubernetes benchmark and rules defined in Kubesec.io.

Ansible role for Ubuntu 2004 CIS Baseline