cis

Star

Here are 268 public repositories matching this topic...

Language:All

Filter by language

All268 YAML36 Python31 Shell27 HTML16 HCL15 Java13 PowerShell13 Ruby13 Puppet10 Go9

Sort:Most stars

Sort options

Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

trimstray /the-practical-linux-hardening-guide

Star10.1k

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

linux checklist security cis guide centos audit manual pci-dss hardening openscap linux-security linux-hardening redhat-enterprise-linux

UpdatedNov 19, 2024

turbot /steampipe

Star7.2k

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

kubernetes golang aws security devops cis cloud etl azure sqlite terraform postgresql gcp hacktoberfest devsecops cspm steampipe postgresql-fdw cnapp zero-etl

UpdatedMar 18, 2025
Go

neargle /my-re0-k8s-security

Star3k

:atom: [WIP] 整理过去的分享，从零开始的Kubernetes攻防 🧐

kubernetes cis containers blackhat k8s cloud-native hitbsecconf hitb

UpdatedJul 20, 2024
Shell

intuitem /ciso-assistant-community

Star2.8k

CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Compliance/Audit Management and supporting +70 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 800-53, 800-171, CyFun, CJIS, AirCyber, NCSC, ECC, SCF and so much more

security nist cis privacy audit owasp cybersecurity compliance grc hipaa dora isms fedramp gdpr risk-management iso27001 bsi soc2 ebios-rm nis2

UpdatedMar 17, 2025
Python

0x6d69636b /windows_hardening

Star2.4k

HardeningKitty and Windows Hardening Settings

windows checklist security registry cis powershell audit windows-10 windows-server compliance hardening defense stig sisyphus blueteam bsi windows-11 security-baseline windows-hardening

UpdatedMar 17, 2025
PowerShell

cloudgraphdev /cli

Star889

The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.

graphql kubernetes aws security nist devops cis security-audit cloud azure iso gcp developer-tools pci tencent devops-tools security-tools cspm

UpdatedNov 13, 2023
TypeScript

ovh /debian-cis

Star832

PCI-DSS compliant Debian 10/11/12 hardening

shell security cis debian audit pci-dss

UpdatedSep 16, 2024
Shell

aquasecurity /chain-bench

Star742

An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

go golang security cis software-supply-chain vulnera security-tools devsecops misconfiguration open-policy-agent software-supply-chain-security

UpdatedDec 11, 2024
Go

Zeus-Labs /ZeusCloud

Star709

Open Source Cloud Security

aws security cis cloud cybersecurity infosec pentesting bugbounty blueteam security-tools cloudsecurity devsecops cspm cwpp cnapp ciem

UpdatedOct 26, 2023
TypeScript

ansible-lockdown /RHEL7-CIS

Star478

Automated CIS Benchmark Compliance Remediation for RHEL 7 with Ansible

ansible ansible-playbook cis automation ansible-role configuration-management cybersecurity rhel7 system-hardening cis-benchmark linux-hardening cis-hardening cis-security it-compliance secure-configuration secure-baseline cis-compliance enterprise-hardening rhel-security rhel-7-hardening

UpdatedMar 17, 2025
YAML

soxoj /counter-osint-guide-ru

Sponsor

Star424

Исчерпывающее руководство по приватности и контр-ОСИНТ для Рунета и всего СНГ 🇷🇺

security cis privacy osint guide runet counter-osint

UpdatedMay 23, 2024

turbot /steampipe-mod-aws-compliance

Star384

Run individual controls or full compliance benchmarks for CIS, PCI, NIST, HIPAA and more across all of your AWS accounts using Powerpipe and Steampipe.

aws security cis sql pci-dss pci compliance hipaa hacktoberfest rbi nist-csf cis-benchmark steampipe steampipe-mod powerpipe powerpipe-mod

UpdatedMar 17, 2025
Puppet

turbot /powerpipe

Star361

Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.