Lynis
Lynis is an open-source security auditing tool that scans Linux and Unix systems to identify vulnerabilities, misconfigurations, and security gaps, providing detailed reports and recommendations for hardening.
Lynis performs comprehensive security audits by checking system configuration, installed packages, running services, file permissions, and security settings against industry best practices and compliance standards.
The tool runs locally on the target system and examines areas like SSH configuration, firewall rules, disk encryption, user accounts, kernel parameters, and installed security tools. It assigns a security score and generates a detailed report highlighting issues and suggested fixes.
Example usage: lynis audit system performs a full system audit, while lynis show suggestions displays actionable recommendations. Results help system administrators prioritize security improvements and track hardening progress over time.