Automated CIS Benchmark compliance auditing and remediation tool for Ubuntu, RHEL, Amazon Linux, Windows Server, and macOS

CIS Benchmark Compliance Checker is a security automation tool that helps organizations maintain compliance with Center for Internet Security (CIS) benchmarks across multiple operating systems.

✅ Multi-Platform Support: Ubuntu, RHEL, Amazon Linux, Windows Server, macOS
✅ Automated Auditing: Run hundreds of CIS benchmark checks in minutes
✅ Smart Remediation: Fix non-compliant configurations with rollback support
✅ Rich Reporting: Generate HTML, JSON, and CSV reports with interactive dashboards
✅ Customizable Profiles: Adapt checks to your organizational requirements
✅ CI/CD Integration: Easily integrate into automated pipelines

# Clone the repository
git clone https://github.com/SiteQ8/CIS-Benchmark-Compliance-Checker.git
cd CIS-Benchmark-Compliance-Checker

# Install dependencies
pip install -r requirements.txt

# Run setup
python setup.py install

# Run a compliance audit
python -m cis_checker audit --os ubuntu --level 1

# Generate HTML report
python -m cis_checker report --format html --output ./reports

# Apply remediation (with backup)
python -m cis_checker remediate --profile ubuntu_22_04 --backup

# Dry run to see what would change
python -m cis_checker remediate --dry-run

1. Initial Setup: Filesystem, boot settings, mandatory access control
2. Services: System services, special purpose services, service clients
3. Network Configuration: Firewall, network parameters, protocol security
4. Logging & Auditing: System accounting, log configuration, audit rules
5. Access Control: PAM, SSH, user accounts, authentication
6. System Maintenance: File permissions, system file integrity

Documentation is available at: https://siteq8.github.io/CIS-Benchmark-Compliance-Checker

Contributions are welcome! Please read our Contributing Guide for details.

Please report security vulnerabilities to [email protected]. See SECURITY.md for details.

This project is licensed under the MIT License - see the LICENSE file for details.

• Author: SiteQ8
• Email: [email protected]
• GitHub: @SiteQ8

Disclaimer: This tool is provided as-is for security assessment purposes. Always test in a non-production environment first.