Automated security auditing and remediation for enterprise infrastructure
Comprehensive security compliance automation in one powerful tool
Run comprehensive CIS benchmark checks across all your systems in minutes. Fast, accurate, and reliable.
Automatically fix non-compliant configurations with built-in rollback support and backup capabilities.
Generate beautiful HTML reports with compliance scores, trends, and detailed remediation guidance.
Support for Linux, Windows, and macOS systems from a single unified tool and interface.
Seamlessly integrate into your automated pipelines with GitHub Actions, GitLab CI, and Jenkins.
Adapt checks and profiles to your organization's specific security requirements and policies.
Comprehensive coverage across major operating systems
20.04 LTS, 22.04 LTS, 24.04 LTS
RHEL 8, RHEL 9
Amazon Linux 2, 2023
Server 2019, Server 2022
Ventura (13), Sonoma (14)
Get up and running in minutes
# Clone the repository
git clone https://github.com/SiteQ8/CIS-Benchmark-Compliance-Checker.git
cd CIS-Benchmark-Compliance-Checker
# Install dependencies
pip install -r requirements.txt
python setup.py install# Run compliance audit
python -m cis_checker audit --os ubuntu --level 1
# Generate HTML report
python -m cis_checker report --format html --output ./reports# Dry run to preview changes
python -m cis_checker remediate --dry-run
# Apply fixes with backup
python -m cis_checker remediate --profile ubuntu_22_04 --backupComprehensive coverage across all CIS benchmark areas
Filesystem configuration, boot settings, mandatory access control, software updates
System services validation, legacy protocol detection, service hardening
Firewall rules, network parameters, protocol security, IPv6 configuration
Audit daemon config, log file permissions, retention policies, remote logging
SSH hardening, PAM configuration, password policies, user account security
File permissions, system integrity, unowned files, patch management