Cis Benchmark Python Packages

prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

compose-lint

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CIS Docker Benchmark.

prowler-cloud

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

apotrope

Offline, single-executable Windows security posture auditor. 50+ CIS-mapped checks, a 0–100 score, and a self-contained HTML report. No cloud, no agent. MIT.

ec2-security-scanner

AWS EC2 security scanner: 46 checks across 8 categories (IMDSv2, security groups, EBS encryption, public AMIs, IAM, patching), UserData secret detection, and compliance mapping for FSBP, CIS, PCI DSS, HIPAA, SOC 2, ISO 27001 and NIST.

lambda-security-scanner

A comprehensive AWS Lambda security scanner with multi-framework compliance mapping

ecs-eks-security-scanner

AWS ECS/EKS security scanner: 45 checks across 8 categories (privileged containers, secrets in task defs, public endpoints, control-plane logging, IAM), compliance mapping for 11 frameworks

rds-security-scanner

A comprehensive AWS RDS / Aurora security scanner with multi-framework compliance mapping

iam-security-scanner

Comprehensive AWS IAM security scanner with multi-framework compliance mapping

egida

Automatically deploying highly secure infraestructures with early error detection