#Cis

Showing 50 of 50 repositories tagged #cis, ranked by stars

trimstray
trimstray
the-practical-linux-hardening-guide

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

Score
92
★ 10.6k ⑂ 668 +7/day
turbot
turbot
steampipe

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

Score
100
★ 7.9k ⑂ 337 +2/day
Go
intuitem
intuitem
ciso-assistant-community

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 150+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

Score
100
★ 4.2k ⑂ 774 +4/day
Python
neargle
neargle
re0-kubernetes-sec-archive

:atom: [WIP] 整理过去我和K8s、容器、虚拟化相关的分享 🧐

Score
100
★ 3.2k ⑂ 473 +2/day
Shell
0x6d69636b
0x6d69636b
windows_hardening

HardeningKitty and Windows Hardening Settings

Score
97
★ 2.6k ⑂ 328
PowerShell
ovh
ovh
debian-cis

PCI-DSS compliant Debian 11/12 hardening

Score
95
★ 1.0k ⑂ 170
Shell
cloudgraphdev
cloudgraphdev
cli

The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.

Score
47
★ 890 ⑂ 41 +1/day
TypeScript
aquasecurity
aquasecurity
chain-bench

An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

Score
0
★ 774 ⑂ 63
Go
Zeus-Labs
Zeus-Labs
ZeusCloud

Open Source Cloud Security

Score
39
★ 731 ⑂ 53
TypeScript
HomeSecExplorer
HomeSecExplorer
Proxmox-Hardening-Guide

Security hardening guides for PVE and PBS, built on CIS Debian Benchmark with Proxmox specific best practices.

Score
74
★ 515 ⑂ 28 +3/day
turbot
turbot
powerpipe

Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.

Score
87
★ 513 ⑂ 49 +1/day
TypeScript
ansible-lockdown
ansible-lockdown
RHEL7-CIS

Automated CIS Benchmark Compliance Remediation for RHEL 7 with Ansible

Score
53
★ 487 ⑂ 297
YAML
turbot
turbot
steampipe-mod-aws-compliance

Run individual controls or full compliance benchmarks for CIS, PCI, NIST, HIPAA and more across all of your AWS accounts using Powerpipe and Steampipe.

Score
76
★ 413 ⑂ 70
Puppet
mondoohq
mondoohq
mql

open source, cloud-native, graph-based query language

Score
84
★ 402 ⑂ 37
Go
ansible-lockdown
ansible-lockdown
RHEL8-CIS

Automated CIS Benchmark Compliance Remediation for RHEL 8 with Ansible

Score
89
★ 327 ⑂ 185
YAML
alivx
alivx
CIS-Ubuntu-20.04-Ansible

Ansible Role to Automate CIS v1.1.0 Ubuntu Linux 18.04 LTS, 20.04 LTS Remediation

Score
57
★ 259 ⑂ 104
HTML
ansible-lockdown
ansible-lockdown
UBUNTU22-CIS

Automated CIS Benchmark Compliance Remediation for Ubuntu 22 with Ansible

Score
79
★ 253 ⑂ 105
YAML
ansible-lockdown
ansible-lockdown
RHEL9-CIS

Automated CIS Benchmark Compliance Remediation for RHEL 9 with Ansible

Score
82
★ 213 ⑂ 141
YAML
ansible-lockdown
ansible-lockdown
UBUNTU24-CIS

Automated CIS Benchmark Compliance Remediation for Ubuntu 24 with Ansible

Score
71
★ 205 ⑂ 62 +1/day
YAML
cloudposse
cloudposse
terraform-aws-cloudtrail-cloudwatch-alarms

Terraform module for creating alarms for tracking important changes and occurrences from cloudtrail.

Score
14
★ 203 ⑂ 73
HCL
ansible-lockdown
ansible-lockdown
UBUNTU20-CIS

Ansible CIS Benchmark Compliance Remediation for UBUNTU20

Score
68
★ 186 ⑂ 71
YAML
ansible-lockdown
ansible-lockdown
Windows-2019-CIS

Automated CIS Benchmark Compliance Remediation for Windows Server 2019 with Ansible

Score
66
★ 149 ⑂ 82
YAML
ansible-lockdown
ansible-lockdown
Windows-2022-CIS

Automated CIS Benchmark Compliance Remediation for Windows Server 2022 with Ansible

Score
63
★ 117 ⑂ 51
YAML
mitre
mitre
inspec_tools

A command-line and ruby API of utilities, converters and tools for creating, converting and processing security baseline formats, results and data

Score
5
★ 98 ⑂ 32
Ruby
ansible-lockdown
ansible-lockdown
DEBIAN12-CIS

Automated CIS Benchmark Compliance Remediation for Debian 12 with Ansible

Score
61
★ 92 ⑂ 24
YAML
klouddb
klouddb
klouddbshield

KloudDB Shield is a comprehensive Postgres Security Tool - PII Scanner , CIS Benchmarks , SSL audit , 12+ features .. Supports Postgres, RDS ,Aurora, MySQL

Score
55
★ 90 ⑂ 20
Go
florianutz
florianutz
Ubuntu1604-CIS

Ubuntu CIS Hardening Ansible Role

Score
86
★ 90 ⑂ 50
Jinja
rdiers
rdiers
CentOS7-CIS

Ansible CentOS 7 - CIS Benchmark Hardening Script

Score
0
★ 89 ⑂ 56
Shell
IntuneAdmin
IntuneAdmin
IntuneBaselines

Intunebaselines by Wolkenman.nl

Score
18
★ 81 ⑂ 22 +1/day
HTML
mitre
mitre
aws-foundations-cis-baseline

InSpec profile to validate your VPC to the standards of the CIS Amazon Web Services Foundations Benchmark

Score
26
★ 77 ⑂ 29
Ruby
pyToshka
pyToshka
docker-wazuh-agent

Monitoring a Kubernetes cluster involves deploying and utilizing the Wazuh agent within the Kubernetes environment.

Score
71
★ 76 ⑂ 39
Python
turbot
turbot
steampipe-mod-zoom-compliance

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS for Zoom using Powerpipe and Steampipe.

Score
24
★ 66 ⑂ 6
Pascal
Myohannn
Myohannn
CIS-Auditor-Windows

A Windows CIS benchmark policy compliance auditor

Score
0
★ 66 ⑂ 14
PowerShell
turbot
turbot
steampipe-mod-azure-compliance

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, HIPAA HITRUST, NIST, and more across all of your Azure subscriptions using Powerpipe and Steampipe.

Score
42
★ 61 ⑂ 21
Puppet
jimrazmus
jimrazmus
c7n-policies

Cloud Custodian Policies for Automated Amazon Resource Management

Score
0
★ 59 ⑂ 30
Python
ansible-lockdown
ansible-lockdown
UBUNTU22-CIS-Audit

Automated CIS Benchmark Compliance Audit for Ubuntu 22 with Ansible & GOSS

Score
34
★ 51 ⑂ 23
YAML
ansible-lockdown
ansible-lockdown
RHEL9-CIS-Audit

Automated CIS Benchmark Compliance Audit for RHEL 9 with Ansible & GOSS

Score
45
★ 50 ⑂ 23
YAML
cyb3rint3l-labs
cyb3rint3l-labs
ServerSecurityAudit

PowerShell-based Windows Server Security Audit Engine by Cyb3rint3l Labs. Measures alignment with the NIS2 directive and maps findings to MITRE ATT&CK tactics & CIS Controls v8 practices. Generates interactive HTML dashboards & structured JSON datasets.

Score
11
★ 46 ⑂ 8
PowerShell
ansible-lockdown
ansible-lockdown
AMAZON2023-CIS

Automated CIS Benchmark Compliance Remediation for Amazon 2023 with Ansible

Score
58
★ 45 ⑂ 43
YAML
ansible-lockdown
ansible-lockdown
Windows-11-CIS

Automated CIS Benchmark Compliance Remediation for Windows 11 Enterprise with Ansible

Score
32
★ 40 ⑂ 18
YAML
ansible-lockdown
ansible-lockdown
RHEL8-CIS-Audit

Automated CIS Benchmark Compliance Audit for RHEL 8 with Ansible & GOSS

Score
50
★ 39 ⑂ 32
YAML
MVladislav
MVladislav
ansible-cis-ubuntu-2204

CIS Ubuntu 22.04 - v3.0.0 - Ansible Role

Score
43
★ 38 ⑂ 11 +1/day
YAML
ansible-lockdown
ansible-lockdown
AMAZON2-CIS

Automated CIS Benchmark Compliance Remediation for Amazon Linux 2 with Ansible

Score
29
★ 36 ⑂ 26
YAML
ansible-lockdown
ansible-lockdown
UBUNTU24-CIS-Audit

Automated CIS Benchmark Compliance Audit for Ubuntu 24 with Ansible & GOSS

Score
21
★ 36 ⑂ 15
YAML
MVladislav
MVladislav
ansible-cis-ubuntu-2404

CIS Ubuntu 24.04 - v1.0.0 - Ansible Role

Score
29
★ 34 ⑂ 13
YAML
ansible-lockdown
ansible-lockdown
RHEL10-CIS

Automated CIS Benchmark Compliance Remediation for RHEL 10 with Ansible

Score
37
★ 31 ⑂ 25
Jinja
ansible-lockdown
ansible-lockdown
UBUNTU18-CIS

Ansible CIS Benchmark Compliance Remediation for UBUNTU18

Score
8
★ 31 ⑂ 26
YAML
ansible-lockdown
ansible-lockdown
DEBIAN12-CIS-Audit

Automated CIS Benchmark Compliance Audit for Debian 12 with Ansible & GOSS

Score
13
★ 29 ⑂ 9
YAML
ansible-lockdown
ansible-lockdown
Windows-2016-CIS

Automated CIS Benchmark Compliance Remediation for Windows Server 2016 with Ansible

Score
3
★ 28 ⑂ 37
YAML
ansible-lockdown
ansible-lockdown
DEBIAN11-CIS

Ansible CIS Benchmark Compliance Remediation for DEBIAN11

Score
16
★ 28 ⑂ 7
YAML
Related Topics
#automation#cis-benchmark#ansible-role#cybersecurity#ansible#system-hardening#ansible-playbook#cis-compliance#cis-security#enterprise-hardening#it-compliance#security

© 2026 GitRepoTrend · GitHub repositories by topic · Updated weekly