A command-line and ruby API of utilities, converters and tools for creating, converting and processing security baseline formats, results and data

InSpec profile to validate your VPC to the standards of the CIS Amazon Web Services Foundations Benchmark

A web application to streamline the development of STIGs from SRGs

(WIP) CIS Microsoft Azure Foundations Benchmark

InSpec profile for Microsoft Windows 10, against DISA's Microsoft Windows 10 Security Technical Implementation Guide (STIG) Version 1, Release 19

Microsoft Windows Server 2019 STIG InSpec Profile

A micro InSpec baseline to check for insecure or public s3 buckets in your VPC

InSpec profile to validate the secure configuration of Canonical Ubuntu 16.04 LTS against DISA's Canonical Ubuntu 16.04 LTS Security Technical Implementation Guide (STIG) Version 1 Release 1.

A Mongo-based version of Heimdall (Deprecated)

Nginx Baseline - InSpec Profile

Inspec profile to validate security settings of Archer to the RSA Archer Security Guidance

InSpec profile to validate the secure configuration of Ubuntu 20.04, against DISA's Canonical Ubuntu 20.04 LTS Security Technical Implementation Guide (STIG) Version 1, Release 6.

(WIP) (Alpha) InSpec profile for CIS Apache Tomcat v8 Benchmark

CIS Docker Community Edition Benchmark InSpec Profile

InSpec profile to validate the secure configuration of Red Hat Enterprise Linux 6, against DISA's Red Hat Enterprise Linux 6 Security Technical Implementation Guide (STIG) Version 1, Release 21.

ALPHA WIP This chef cookbook provides secure nginx configurations.

Inspec Profile for the JRE 8 STIG

(WIP) (ALPHA) InSpec Profile for the CIS Apache Tomcat v7 Benchmark

InSpec profile to validate the secure configuration of Oracle MySQL Enterprise Edition version 5.7, against CIS's Oracle MySQL Enterprise Edition 5.7 CIS Benchmark.

(WIP) Chef recipe for hardening tomcat 8 to the CIS Tomcat Benchmark v1.0.1