Configuration Baselines

CIS BenchmarksStart here

Detailed, consensus-developed configuration guides from the Center for Internet Security that specify how to securely configure operating systems, applications, and devices. They turn 'harden this system' into concrete, checkable settings.

Drift Detection

Identifying when a system's actual configuration has drifted away from its intended secure baseline, so the deviation can be investigated and corrected before it becomes a vulnerability or compliance gap.

Attack Surface Reduction

Configuration as Code

Default Configurations

Hardening Guides

Idempotent Configuration

Secure by Default