News for hackers. Stuff that matters.

A comment on Lynis – Security auditing and hardening tool, for Unix-based systems. Parent comment

Re:Lynis – Security auditing and hardening tool, for Unix-ba... by lmeyerov on Saturday November 09, 2024 @11:20AM (#42095198)
We are looking for something to run as part of our ami/docker testing and as you say, stays fresh on standards (whatever soc2/iso, but ideally also FIPS) , any prefs?
[ Parent | on HN ]
Re:Lynis – Security auditing and hardening tool, for Unix-ba... by e1g on Saturday November 09, 2024 @12:29PM (#42095588)
This is great https://github.com/ComplianceAsCode/content

I use it for regular scanning, flagging potential issues, automatically making changes, aligning images to CIS Level 2, and for ongoing scanning to satisfy SOC2 auditors.

[ Parent | on HN ]