CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management and supporting +43 frameworks worldwide: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 800-53, 800-171, CyFun, CJIS, AirCyber and so much more

open source, cloud-native, graph-based asset inventory

ONYX: Cisco Automated Assessment and Auditing Tool (CAAAT). An open-source tool that automatically assesses and audits Cisco IOS routers against Center for Internet Security (CIS) Cisco IOS 15 Benchmark and Cisco IOS 17 Benchmark.

Terraform module to create and work with internet services on IBM Cloud

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, HIPAA HITRUST, NIST, and more across all of your Azure subscriptions using Powerpipe and Steampipe.

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS across all of your GCP projects using Powerpipe and Steampipe.

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.

Ansible Role to Automate CIS v1.1.0 Ubuntu Linux 18.04 LTS, 20.04 LTS Remediation

Android Configuration Checker is a tool designed to ensure the compliance of Android device configuration settings with the CIS (Center for Internet Security) benchmarks. Leveraging ADB (Android Debug Bridge), the tool queries device settings and compares them against predefined CIS benchmarks, reporting any non-compliance.

The Audit Test Automation Package gives you the ability to get an overview about the compliance status of several systems. You can easily create HTML-reports and have a transparent overview over compliance and non-compliance of explicit setttings and configurations in comparison to industry standards and hardening guides.

Audit for Ubuntu 22 CIS

Исчерпывающее руководство по приватности и контр-ОСИНТ для Рунета и всего СНГ 🇷🇺

Comprehensive Counter OSINT and privacy guide (initially for CIS countries)

Apply and/or check recommendations from the CIS benchmarks.

Ansible role for Red Hat 9 CIS Baseline

Monitoring a Kubernetes cluster involves deploying and utilizing the Wazuh agent within the Kubernetes environment.

Vanilla PHP to extract CIS benchmarks from a .Nessus file

Terraform module for creating alarms for tracking important changes and occurrences from cloudtrail.

Ansible role for Red Hat 8 CIS Baseline