Lynis
Lynis is a security auditing tool focused on host configuration quality and hardening posture.
Why it matters
- Detects weak defaults and missing hardening controls.
- Produces actionable recommendations for ops/security teams.
- Useful for periodic baseline assessments.
Operational notes
- Run audits regularly and track score trends.
- Convert recurring findings into configuration policy.
- Pair with CI checks for immutable image pipelines.