Definition
The CIS Linux and Windows Benchmarks describe, control by control, a hardened system configuration. Checking them traditionally requires an agent or SSH access on every machine.
Glossary
Host hardening
Checking that your machines follow a hardening benchmark, accounts, services, logging, firewall, mounts, Windows registry, without installing an agent.
In Ctadel
The Hosts scanner mounts a disk snapshot on an ephemeral instance inside your account, reads the configuration, then destroys the copy. Controls that require observing a running service are reported as not evaluated, not as compliant. The Remediation tab gives the audit and rollback commands.
See it on your accounts
The online demonstration is open to all, on fictitious data. For an instance on your own accounts, request a demonstration.