This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

[WIP] 整理过去的分享，从零开始的Kubernetes攻防 🧐

The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.

An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

Open Source Cloud Security

PCI-DSS compliant Debian 10/11/12 hardening

Ansible role for Red Hat 7 CIS Baseline

Run individual controls or full compliance benchmarks for CIS, PCI, NIST, HIPAA and more across all of your AWS accounts using Powerpipe and Steampipe.

CISO Assistant is an open-source one-stop-shop for GRC - Risk and Audit Management supporting +30 standards and frameworks: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, CyFun, AirCyber and so much more

Исчерпывающее руководство по приватности и контр-ОСИНТ для Рунета и всего СНГ 🇷🇺

open source, cloud-native, graph-based asset inventory

Comprehensive Counter OSINT and privacy guide (initially for CIS countries)

Ansible Role to Automate CIS v1.1.0 Ubuntu Linux 18.04 LTS, 20.04 LTS Remediation

Ansible role for Red Hat 8 CIS Baseline

Blue Team Scripts

Simple command line tool to check for compliance against CIS Benchmarks

Terraform module for creating alarms for tracking important changes and occurrences from cloudtrail.

This repository offers a comprehensive library of security policies designed to enhance the security of Kubernetes cluster configurations. The policies are developed in accordance with the CIS Kubernetes benchmark.

Ansible role for Ubuntu 2004 CIS Baseline