HCR
CIS benchmarks on your machines, without an agent
A disk snapshot is mounted on an ephemeral instance inside your account, read, then destroyed. Accounts, services, logging, firewall, mounts and the Windows registry are checked against the CIS benchmarks.
- What is read
- Accounts, services, logging, firewall, mounts, Windows registry.
- How
- Disk snapshot mounted on a short-lived instance inside your account, read, then destroyed.
- In the application
- Hosts page: findings per machine and per control, with the audit command and the rollback command.
What it cannot see. A control that requires running a command on the machine, such as the state of a running service, is reported as not evaluated, never as compliant.
Example detections
- Root SSH login allowed
- Audit logging missing
- Windows firewall disabled on a profile
The other modules
Ready to see this module on your accounts?
The public demonstration runs on fictitious data. For an instance on your own accounts, request a demonstration.