CISOfy/lynis — Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems.

Description and use

Lynis is an open‑source security auditing tool that scans Linux, macOS, and other UNIX‑like systems to uncover configuration weaknesses, missing patches, and policy violations. It supports compliance testing for standards such as HIPAA, ISO 27001, and PCI DSS, and can be run without agents, making installation optional. Ideal for developers and security teams looking to harden systems and generate actionable hardening recommendations.

Problem

CISOfy/lynis helps catch security and privacy issues earlier in the workflow.

Outcome

Medium: useful for prototypes or internal workflows, with dependency and maintenance checks before production.

Workflow

• strengthen security checks
• add auth or privacy controls
• audit risk earlier

Evidence

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Source