Lynis

Security auditing tool for Linux, macOS, and UNIX-based systems.

Visit Website →

Overview

Lynis is a security auditing tool for Unix-based systems. It performs an in-depth security scan, checking for security information and issues, file permissions, configuration errors, and more. Lynis is used by system administrators, security professionals, and auditors to assess the security defenses of their systems. It helps with system hardening and compliance testing.

✨ Key Features

  • Security Auditing
  • System Hardening
  • Compliance Testing (e.g., ISO 27001, PCI-DSS)
  • Vulnerability Detection
  • Intrusion Detection

🎯 Key Differentiators

  • In-depth, host-based security auditing
  • Focus on system hardening and compliance
  • Open-source and extensible

Unique Value: Provides a comprehensive and in-depth security audit of Unix-based systems, helping to improve their security posture and achieve compliance.

🎯 Use Cases (3)

System security auditing and hardening Compliance testing and reporting Vulnerability scanning of Unix-based systems

✅ Best For

  • Performing a comprehensive security audit of a Linux server
  • Checking a system's configuration against security best practices

💡 Check With Vendor

Verify these considerations match your specific requirements:

  • Network-level vulnerability scanning
  • Web application security testing

🏆 Alternatives

OpenSCAP Nessus (for host-based scanning) Qualys (for host-based scanning)

Offers a more detailed and hardening-focused assessment of individual systems compared to network-based vulnerability scanners.

💻 Platforms

Linux macOS UNIX

✅ Offline Mode Available

🔌 Integrations

Can be integrated into scripts and management tools

🛟 Support Options

  • ✓ Email Support
  • ✓ Dedicated Support (Enterprise tier)

🔒 Compliance & Security

✓ GDPR ✓ SSO ✓ ISO 27001 ✓ PCI-DSS ✓ HIPAA

💰 Pricing

Contact for pricing
Free Tier Available

Free tier: The community version is fully functional.

Visit Lynis Website →