A command-line and ruby API of utilities, converters and tools for creating, converting and processing security baseline formats, results and data

InSpec profile to validate your VPC to the standards of the CIS Amazon Web Services Foundations Benchmark

A web application to streamline the development of STIGs from SRGs

(WIP) An ansible playbook to harden a docker host to the CIS CE Benchmark requirements

(WIP) A terraform / kitchen-terraform hardening baseline for the cis-aws-foundations-baseline

Heimdall Lite 2.0 is a JavaScript based security results viewer and review tool supporting multiple security results formats, such as: InSpec, SonarQube, OWASP-Zap and Fortify which you can load locally, from S3 and other data sources.

(WIP) CIS Microsoft Azure Foundations Benchmark

InSpec profile for Microsoft Windows 10, against DISA's Microsoft Windows 10 Security Technical Implementation Guide (STIG) Version 1, Release 19

Microsoft Windows Server 2019 STIG InSpec Profile

A micro InSpec baseline to check for insecure or public s3 buckets in your VPC

InSpec profile to validate the secure configuration of Canonical Ubuntu 16.04 LTS against DISA's Canonical Ubuntu 16.04 LTS Security Technical Implementation Guide (STIG) Version 1 Release 1.

A Mongo-based version of Heimdall (Deprecated)

Nginx Baseline - InSpec Profile

(deprecated) A refactor of the heimdall-lite project using vue, see:

Proof of Concept - Alpha - An exploration in a mega container to link up all the SAF security tools

Inspec profile to validate security settings of Archer to the RSA Archer Security Guidance

Ansible role for Red Hat 7 STIG Baseline

InSpec profile to validate the secure configuration of Ubuntu 20.04, against DISA's Canonical Ubuntu 20.04 LTS Security Technical Implementation Guide (STIG) Version 1, Release 6.

(WIP) (Alpha) InSpec profile for CIS Apache Tomcat v8 Benchmark

WIP Ansible playbook for hardening a tomcat instance to the CIS Tomcat Benchmark v1.0.1