An open API service indexing awesome lists of open source software.

https://github.com/trikusec/trikusec

TrikuSec is a centralized Linux server auditing and compliance management platform
https://github.com/trikusec/trikusec

compiance cybersecurity infosec linux logs lynis ransomware security

Last synced: about 2 months ago
JSON representation

TrikuSec is a centralized Linux server auditing and compliance management platform

Awesome Lists containing this project

README

          

# TrikuSec

**TrikuSec** is a centralized Linux server auditing and compliance management platform built on [Lynis](https://cisofy.com/lynis/). It collects, stores, and analyzes security audit reports from multiple Linux servers in one place, enabling centralized monitoring and policy compliance management across your infrastructure.

## Use Cases

TrikuSec is ideal for:

- **Security Compliance Monitoring**: Ensure servers meet security policies and regulatory requirements
- **Infrastructure Auditing**: Track security posture across multiple servers from a single dashboard
- **Change Tracking**: Monitor changes between audit runs to identify security drift
- **Policy Enforcement**: Automatically evaluate compliance against organizational policies
- **Centralized Reporting**: Single point of visibility for all server audits across your infrastructure

## Features

### Core Capabilities

- **Security Overview Dashboard**: Centralized dashboard with at-a-glance visibility into compliance rates, warning counts, OS distribution, top security issues, and devices requiring attention
- **Centralized Audit Collection**: Receives audit reports from multiple Linux servers via Lynis clients, storing full reports and generating diff reports to track changes over time
- **Device Management**: Tracks all monitored servers with metadata including hostname, OS, distribution, version, and compliance status
- **Policy & Compliance Management**: Define custom compliance rules using a query language and automatically evaluate devices against assigned policies
- **Report Analysis**: View complete audit reports, track changes between audits, and analyze historical compliance trends
- **PDF Export**: Export comprehensive device reports to PDF format for documentation and compliance audits
- **Web Interface**: User-friendly interface for viewing devices, compliance status, policies, and reports
- **API Integration**: Lynis-compatible API endpoints for seamless integration with existing Lynis installations

### Screenshots

**Security Overview Dashboard**
The main dashboard provides a comprehensive security overview with summary cards showing compliance rates, warning counts, OS distribution, top security issues across your infrastructure, and a dedicated section highlighting devices that require immediate attention.

![TrikuSec Devices List](docs/assets/img/trikusec-devices.png)

![Device Detail View](docs/assets/img/trikusec-device-detail.png)

## Quick Start

1. **Download `docker-compose.yml`** from the [repository](https://github.com/trikusec/trikusec/blob/main/docker-compose.yml)

2. **Create a `.env` file** with your configuration:
```bash
# Generate a secure SECRET_KEY
python3 -c "import secrets; print(secrets.token_urlsafe(50))"

# Create .env file
cat > .env < **Note:** We have no relationship, affiliation, or partnership with CISOfy. This recommendation is made solely to help users find appropriate solutions for their needs.