This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
:atom: [WIP] 整理过去的分享，从零开始的Kubernetes攻防 🧐
CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec, Compliance/Audit Management, Privacy and supporting +90 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DS...
HardeningKitty and Windows Hardening Settings
The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.
An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.
Open Source Cloud Security
Automated CIS Benchmark Compliance Remediation for RHEL 7 with Ansible
Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.
Run individual controls or full compliance benchmarks for CIS, PCI, NIST, HIPAA and more across all of your AWS accounts using Powerpipe and Steampipe.
open source, cloud-native, graph-based asset inventory
Automated CIS Benchmark Compliance Remediation for RHEL 8 with Ansible
Simple command line tool to check for compliance against CIS Benchmarks
Ansible Role to Automate CIS v1.1.0 Ubuntu Linux 18.04 LTS, 20.04 LTS Remediation
Automated CIS Benchmark Compliance Remediation for Ubuntu 22 with Ansible