A security auditing and hardening tool for UNIX-based systems, performing in-depth scans and compliance testing.
Lynis is a security auditing and hardening tool for UNIX-based systems like Linux, macOS, and BSD. It performs in-depth security scans to test defenses, detect vulnerabilities, and provide tips for system hardening. The tool also assists with compliance testing for standards such as ISO27001, PCI-DSS, and HIPAA.
System administrators, auditors, security officers, penetration testers, and security professionals responsible for assessing and improving the security of UNIX-based systems.
Developers choose Lynis for its agentless operation, comprehensive security scanning, and actionable hardening recommendations. Its open-source nature, regular updates, and focus on simplicity make it a trusted tool for both compliance and security assessments.
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Performs automated audits to detect vulnerabilities and configuration issues, as highlighted in its primary goals for system hardening and compliance testing.
Runs directly on the system without requiring permanent agents, making deployment straightforward and resource-efficient, as noted in the agentless operation feature.
Assists with standards like ISO27001, PCI-DSS, and HIPAA, providing actionable tips for meeting audit requirements, as stated in the compliance testing assistance.
Maintained with regular updates and open-source, allowing users to trust and customize the tool, per the philosophy of simplicity and transparency.
Lynis is designed for on-demand scans only, so it doesn't offer continuous security monitoring, which could be a gap for dynamic or high-risk environments.
The open-source version lacks a graphical interface, requiring terminal proficiency for all operations, while the Enterprise version adds a web interface.
Some distributions provide outdated packages, necessitating manual updates or use of third-party repos like CISOfy's, as warned in the installation section.