12 · Hardening domain
Compliance & Benchmarks
Hardening you can't measure won't last. This domain maps your system against recognized baselines — CIS Benchmarks, ANSSI-BP-028, DISA STIG — and automates auditing with Lynis and OpenSCAP.
- Lynis & CIS Benchmark: Audit Linux Hardening
Audit Linux against a CIS Benchmark: run Lynis for a hardening index, score CIS/STIG/ANSSI with OpenSCAP, then remediate and track it.