Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Projects in Awesome Lists tagged with cis

A curated list of projects in awesome lists tagged with cis .

https://github.com/trimstray/the-practical-linux-hardening-guide

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

audit centos checklist cis guide hardening linux linux-hardening linux-security manual openscap pci-dss redhat-enterprise-linux security

Last synced: 14 May 2025

https://github.com/turbot/steampipe

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

aws azure cis cloud cnapp cspm devops devsecops etl gcp golang hacktoberfest kubernetes postgresql postgresql-fdw security sqlite steampipe terraform zero-etl

Last synced: 14 May 2025

https://github.com/intuitem/ciso-assistant-community

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 150+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

audit automation bsi cis compliance cybersecurity dora ebios-rm gdpr grc isms iso27001 llm mcp nis2 nist quantification risk-management security soc2

Last synced: 05 Jun 2026

https://github.com/neargle/my-re0-k8s-security

:atom: [WIP] 整理过去的分享，从零开始的Kubernetes攻防 🧐

blackhat cis cloud-native containers hitb hitbsecconf k8s kubernetes

Last synced: 11 Apr 2025

https://github.com/cloudgraphdev/cli

The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.

aws azure cis cloud cspm developer-tools devops devops-tools gcp graphql iso kubernetes nist pci security security-audit security-tools tencent

Last synced: 01 Apr 2025

https://github.com/ovh/debian-cis

PCI-DSS compliant Debian 10/11/12 hardening

audit cis debian pci-dss security shell

Last synced: 16 May 2025

https://github.com/aquasecurity/chain-bench

An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

cis devsecops go golang misconfiguration open-policy-agent security security-tools software-supply-chain software-supply-chain-security vulnera

Last synced: 13 Oct 2025

https://github.com/soxoj/counter-osint-guide-ru

Исчерпывающее руководство по приватности и контр-ОСИНТ для Рунета и всего СНГ 🇷🇺

cis counter-osint guide osint privacy runet security

Last synced: 27 Jan 2026

https://github.com/turbot/powerpipe

Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.

aws azure cis cloud cnapp cspm dashboards devops devsecops duckdb gcp hacktoberfest hcl kubernetes mysql postgresql security sql sqlite terraform

Last synced: 17 Feb 2026

https://github.com/mondoohq/mql

open source, cloud-native, graph-based query language

aws azure cis cloud-computing cloud-native gcp kubernetes linux macos security security-as-code unix windows

Last synced: 05 May 2026

https://github.com/turbot/steampipe-mod-aws-compliance

Run individual controls or full compliance benchmarks for CIS, PCI, NIST, HIPAA and more across all of your AWS accounts using Powerpipe and Steampipe.

aws cis cis-benchmark compliance hacktoberfest hipaa nist-csf pci pci-dss powerpipe powerpipe-mod rbi security sql steampipe steampipe-mod

Last synced: 15 May 2025

https://github.com/mondoohq/cnquery

open source, cloud-native, graph-based asset inventory

aws azure cis cloud-computing cloud-native gcp kubernetes linux macos security security-as-code unix windows

Last synced: 14 Feb 2026

https://github.com/HomeSecExplorer/Proxmox-Hardening-Guide

Security hardening guides for PVE and PBS, built on CIS Debian Benchmark with Proxmox specific best practices.

ceph cis debian enterprise hardening homelab pbs proxmox proxmox-backup-server proxmox-ve pve security virtualization zfs

Last synced: 18 Apr 2026

https://github.com/soxoj/counter-osint-guide-en

Comprehensive Counter OSINT and privacy guide (initially for CIS countries)

cis counter-osint guide osint privacy runet security

Last synced: 28 Jan 2026

https://github.com/finalduty/cis-benchmarks-audit

Simple command line tool to check for compliance against CIS Benchmarks

audit centos centos7 cis cis-benchmark compliance hardening

Last synced: 26 Mar 2025

https://github.com/cloudposse/terraform-aws-cloudtrail-cloudwatch-alarms

Terraform module for creating alarms for tracking important changes and occurrences from cloudtrail.

alarm cis cloudtrail cloudwatch-metrics devops security-audit slack terraform terraform-modules

Last synced: 16 May 2025

https://github.com/raspbernetes/k8s-security-policies

This repository offers a comprehensive library of security policies designed to enhance the security of Kubernetes cluster configurations. The policies are developed in accordance with the CIS Kubernetes benchmark.

benchmark cis cis-kubernetes-benchmark conftest gatekeeper kubernetes kubernetes-clusters kubesec open-policy-agent raspbernetes rego-files rego-policy security violation

Last synced: 12 May 2025

https://github.com/mitre/inspec_tools

A command-line and ruby API of utilities, converters and tools for creating, converting and processing security baseline formats, results and data

checklist cis compliance converter disa disa-checklist inspec json mitre-corporation mitre-inspec security stig xccdf

Last synced: 20 Aug 2025

https://github.com/florianutz/ubuntu1604-cis

Ubuntu CIS Hardening Ansible Role

ansible ansible-role cis hardening ubuntu

Last synced: 19 Sep 2025

https://github.com/mitre/aws-foundations-cis-baseline

InSpec profile to validate your VPC to the standards of the CIS Amazon Web Services Foundations Benchmark

aws aws-security cis cloud ia inspec inspec-profile mitre-corporation mitre-inspec mitre-saf security

Last synced: 05 Apr 2025

https://github.com/massyn/centos-cis-benchmark

CIS CentOS Linux 7 Benchmark

centos6 cis cis-benchmark

Last synced: 22 Jul 2025

https://github.com/turbot/steampipe-mod-zoom-compliance

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS for Zoom using Powerpipe and Steampipe.

cis cis-benchmark compliance hacktoberfest powerpipe powerpipe-mod security sql steampipe steampipe-mod zoom

Last synced: 25 Feb 2026

https://github.com/jimrazmus/c7n-policies

Cloud Custodian Policies for Automated Amazon Resource Management

amazon-web-services automation cis cloud-custodian cloudformation compliance governance python

Last synced: 17 Jan 2026

https://github.com/pyToshka/docker-wazuh-agent

Monitoring a Kubernetes cluster involves deploying and utilizing the Wazuh agent within the Kubernetes environment.

aks cis daemonset devops eks gke kubernetes monitoring scanner security-tools wazuh wazuh-agent wazuh-server

Last synced: 08 Apr 2025

https://github.com/pytoshka/docker-wazuh-agent

Monitoring a Kubernetes cluster involves deploying and utilizing the Wazuh agent within the Kubernetes environment.

aks cis daemonset devops eks gke kubernetes monitoring scanner security-tools wazuh wazuh-agent wazuh-server

Last synced: 09 Apr 2025

https://github.com/nozaq/amazon-linux-cis

Bootstrap script for Amazon Linux to comply CIS Amazon Linux Benchmark v2.0.0

amazon-linux aws cis hardening security

Last synced: 16 May 2025

https://github.com/turbot/steampipe-mod-azure-compliance

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, HIPAA HITRUST, NIST, and more across all of your Azure subscriptions using Powerpipe and Steampipe.

azure cis cis-benchmark compliance hacktoberfest powerpipe powerpipe-mod security sql steampipe steampipe-mod

Last synced: 08 Apr 2025

https://github.com/turbot/steampipe-mod-gcp-compliance

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS across all of your GCP projects using Powerpipe and Steampipe.

cis cis-benchmark compliance gcp hacktoberfest powerpipe powerpipe-mod security sql steampipe steampipe-mod

Last synced: 15 Apr 2025

https://github.com/SSHcom/c3

𝗖𝟯 provides compliant AWS CDK components to various security standards.

aws-cdk cis cis-controls gdpr gdpr-compliant hacktoberfest hacktoberfest2020 infrastructure infrastructure-as-code privacy

Last synced: 30 Mar 2025

https://github.com/d2iq-archive/kubernetes-security-benchmark

A simple way to evaluate the security of your Kubernetes deployment against sets of best practices defined by various community sources

cis cli cobra dcos golang ksphere kubernetes security

Last synced: 31 Mar 2025

https://github.com/jamf/cis-for-macos-sierra-cp

CIS for macOS 10.12 remediated with script and configuration profiles

cis configuration-profile jamf

Last synced: 28 Jun 2025

https://github.com/turbot/steampipe-mod-microsoft365-compliance

Run individual controls or full compliance benchmarks for CIS across all of your Microsoft 365 and Office 365 tenants using Powerpipe and Steampipe.

azuread cis cis-benchmark compliance hacktoberfest microsoft365 office365 powerpipe powerpipe-mod security steampipe steampipe-mod

Last synced: 22 Apr 2025

https://github.com/mitre/cis-aws-foundations-hardening

(WIP) A terraform / kitchen-terraform hardening baseline for the cis-aws-foundations-baseline

aws aws-hardening aws-security cis cis-aws-benchmark inspec kitchen-terraform mitre-corporation mitre-inspec test-kitchen wip

Last synced: 06 Jul 2025

https://github.com/mitre/ansible-cis-docker-ce-hardening

(WIP) An ansible playbook to harden a docker host to the CIS CE Benchmark requirements

cis docker docker-security inspec mitre-corporation mitre-inspec mitre-saf wip

Last synced: 21 Apr 2025

https://github.com/robertdebock/ansible-role-cis

Apply and/or check recommendations from the CIS benchmarks.

ansible cis molecule playbook security tox

Last synced: 24 Apr 2025

https://github.com/spoqa/cleanswift-cis

The CIS pattern is an improvement on the Clean Swift architecture, aligned with advanced technologies and paradigms. It assists in the stable development of iOS and Mac applications.

cis clean-architecture clean-swift clean-swift-architecture swiftui uikit vip viper

Last synced: 13 Jul 2025

https://github.com/sysdiglabs/benchmark-dockerfile

Github action to benchmark dockerfiles in github repository.

action cis dockerfile github

Last synced: 13 Jul 2025

https://github.com/gruntwork-io/tflint-ruleset-aws-cis

Tflint rules for CIS AWS Foundations Benchmark compliance checks. These rules work in addition to the recommendations from Gruntwork's CIS Service Catalog.

aws cis devops terraform tflint

Last synced: 24 Oct 2025

https://github.com/open-kingfisher/king-inspect

Perform basic, useless, state, and secure checks on your kubernetes cluster

chart cis diagnostic health-check kubernetes scan

Last synced: 28 Aug 2025

https://github.com/Egida-Kassandra/egida

Automatically deploying highly secure infraestructures with early error detection

ansible ansible-playbook ansible-role automation cis cis-benchmark dsl egida harden hardening network-security security

Last synced: 10 Sep 2025

https://github.com/egida-kassandra/egida

Automatically deploying highly secure infraestructures with early error detection

ansible ansible-playbook ansible-role automation cis cis-benchmark dsl egida harden hardening network-security security

Last synced: 04 Apr 2026

https://github.com/cohdjn/cisecurity

Configures Linux systems to Center for Internet Security Linux hardening standard.

cis cisecurity linux puppet puppet-enterprise puppet-forge puppet-module rhel7

Last synced: 12 Apr 2025

https://github.com/turbot/steampipe-mod-alicloud-compliance

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS across all of your Alibaba Cloud accounts using Powerpipe and Steampipe.

alibaba-cloud alibabacloud alicloud cis cis-benchmark compliance hacktoberfest powerpipe powerpipe-mod security sql steampipe steampipe-mod

Last synced: 22 Apr 2025

https://github.com/turbot/steampipe-mod-github-compliance

Run individual controls or full compliance benchmarks for across all of your GitHub resources using Powerpipe and Steampipe.

cis cis-benchmark compliance github hacktoberfest powerpipe powerpipe-mod security sql steampipe steampipe-mod

Last synced: 22 Apr 2025

https://github.com/mitre/ansible-cis-tomcat-hardening

WIP Ansible playbook for hardening a tomcat instance to the CIS Tomcat Benchmark v1.0.1

cis inspec mitre-corporation mitre-inspec mitre-saf tomcat tomcat-security

Last synced: 30 Jun 2026

https://github.com/xtonousou/cis-bench-centos8

CIS Benchmark v1.0.0 - Level 1 Server - CentOS 8 automation

assessment bash benchmark centos centos8 cis cis-benchmark hardening linux security

Last synced: 30 Oct 2025

https://github.com/jonhadfield/aws-inspector-reporter

an app to report AWS Inspector findings

aws aws-inspector cis cve go inspector lambda report

Last synced: 15 Jul 2025

https://github.com/shearn89/puppet-toughen

Hardening for Linux Servers

centos cis puppet redhat stig

Last synced: 17 Mar 2025

https://github.com/terraform-ibm-modules/terraform-ibm-cis

Terraform module to create and work with internet services on IBM Cloud

cis cloud-internet-services core-team graduated ibm-cloud supported terraform terraform-module

Last synced: 12 Apr 2025

https://github.com/l4rm4nd/invoke-cis-benchmark-iis10

PowerShell Script to Automate CIS Benchmark Auditing for Microsoft IIS 10

auditing benchmark cis cis-benchmark controls hardening iis iis-server microsoft powershell security

Last synced: 01 Sep 2025

https://github.com/sysdiglabs/dockerfile-benchmarker

CIS Docker Benchmark for dockerfiles

cis docker dockerfile image security

Last synced: 09 Aug 2025

https://github.com/turbot/steampipe-mod-oci-compliance

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS across all of your Oracle Cloud Infrastructure accounts using Powerpipe and Steampipe.

cis cis-benchmark compliance hacktoberfest oci oracle-cloud oracle-cloud-infrastructure powerpipe powerpipe-mod security sql steampipe steampipe-mod

Last synced: 06 Mar 2026

https://github.com/mitre/oracle-mysql-ee-5.7-cis-baseline

InSpec profile to validate the secure configuration of Oracle MySQL Enterprise Edition version 5.7, against CIS's Oracle MySQL Enterprise Edition 5.7 CIS Benchmark.

baseline cis inspec mitre-corporation mitre-inspec mysql wip

Last synced: 21 Apr 2025

https://github.com/benjaminurquhart/cio

Input/Output stream wrapper for JDA Channel objects

cio cis cos discord java java-8 java-io jda jda-extension jda-utilities

Last synced: 01 May 2026

https://github.com/mvladislav/ansible-docker

Ansible docker install and setup with CIS section 1-3

ansible ansible-role cis docker rootless rootless-docker

Last synced: 23 Apr 2025

https://github.com/turbot/steampipe-mod-docker-compliance

Run individual controls or full compliance benchmarks for Docker resources and more across all of your Docker containers using Powerpipe and Steampipe.

cis compliance docker docker-api exec hacktoberfest powerpipe powerpipe-mod security sql steampipe steampipe-mod

Last synced: 26 Jan 2026

https://github.com/keinos/tpl-php-helloworld

✅ Overly-super-cautious "Hello World" in PHP7 and PHP8 for fun.

cis composer coveralls docker fun php php8 template-project travis

Last synced: 02 Jul 2025

https://github.com/mvladislav/ansible-env-setup

ansible playbooks with roles to setup client or server. with security related parts

aide ansible ansible-playbook cis docker linux lynis postfix security ssh submodules ubuntu ufw

Last synced: 16 Jul 2025

https://github.com/hmeleiro/opencis

R package to import data from spanish Sociological Research Center (CIS)

abiertos api centro cis data datos estudios open r sociologicos

Last synced: 31 Jul 2025

https://github.com/ansibleaudit/ansibleaudit

ansibleAudit is an open source tool designed to perform automated audits of system configurations using Ansible. This tool uses playbooks to verify configurations according to security best practices. If vulnerabilities or misconfigurations are identified, ansibleAudit provides detailed recommendations and procedures to effectively remediate them.

ansible assessory audit automation benchmark cis compliance configuration-management cve cve-scanning fedora nist security security-audits system-administration ubuntu vulnerability-scanning windows

Last synced: 07 Mar 2026

https://github.com/turbot/steampipe-mod-ibm-compliance

Run individual controls or full compliance benchmarks for CIS across all of your IBM Cloud accounts using Powerpipe and Steampipe.

cis cis-benchmark compliance hacktoberfest ibm-cloud powerpipe powerpipe-mod security sql steampipe steampipe-mod

Last synced: 24 Jan 2026

https://github.com/toktorov/kbtrade

Auto, special equipment, trucks, spare parts, logistics from South Korea to the CIS countries

cars cis django django-rest-framework kbtrade korea

Last synced: 29 Apr 2026

https://github.com/h4r5h1t/hardbuntu

Strengthen the security of your Ubuntu system with this powerful hardening tool based on CIS benchmarks.

cis cis-benchmark cis-benchmarks cis-benchmarks-for-linux hardening hardening-checks-for-linux linux-hardening server-hardening ubuntu ubuntu-cis ubuntu-hardening ubuntu-server ubuntu2004

Last synced: 10 Nov 2025

https://github.com/turbot/steampipe-mod-gitlab-compliance

Run individual controls or full compliance benchmarks for across all of your GitLab resources using Steampipe.

cis cis-benchmark compliance gitlab hacktoberfest security sql steampipe steampipe-mod

Last synced: 10 Jun 2025

https://github.com/fernandonaime/bluething

The Debian 20.04 Compliance application is designed to harden the Ubuntu 20.04 live server according to the CIS Ubuntu Linux 20.04 benchmark (version 2.0.1 - 06-29-2023). The application focuses on hardening services, UFW (Uncomplicated Firewall), PAM (Pluggable Authentication Modules), software patching, and CLI warning banners.

bash-script cis operating-system python3 system-compliance ubuntu-server

Last synced: 20 May 2026