Welcome to Ansible Lockdown

|<div style="width:400px"></div>Part of the Lockdown Suite by| | :---: | |<a href="https://mindpointgroup.com#GH_LockdownReadMe" target="_blank"><img src="https://assets-global.website-files.com/601959b76833363126385b0d/60195aa15ed9274f67255f9b_MPG-logo-mono-blue.svg" width="200" height="75" alt="MindPoint Group"/></a>|

Based upon the following products

| Remediation Roles | Audit Profiles | | :----: | :----: | |<img src="images/ansible.png" width="150" height="77" alt="Ansible by RedHat" />|<img src="images/github-mark.png" width="150" height="150" alt="Github hosted goss" />| |<h2>Ansible</h2>by RedHat <br>|<h2>Goss</h2>Go Server Spec<br>|

What is it?

Based upon industry recognized benchmarks and best practices, using leading products to enable highly adjustable configurations to bring your systems/platforms into security compliance.

• Open Source (MIT licensed)
  • Community supported as standard
  • Enterprise support available
• Configuration-as-code
  • Assist in bringing your systems/platform into compliance through the use of Ansible
  • Audit your current system/platform using Goss
• Highly configurable to work with your systems

Content

|CIS| DISA-STIG | |:--|:--:| |<img src="https://opscompass.com/wp-content/uploads/center-for-internet-security-logo.png" width="200" height="75" alt="CIS" />|<img src="https://res.cloudinary.com/canonical/image/fetch/f_auto,q_auto,fl_sanitize,w_1440,h_528/https://assets.ubuntu.com/v1/ef01809f-DISA-logo-transparent.png" width="100" height="100" alt="Disa STIG" />| |CIS Repos|STIG Repos|

---

Looking for support?

• Enterprise Support
• Documentation

Useful Links

• Ansible Lockdown

  • Ansible Galaxy
  • Discord Community Discussions
  • Videos
  • Full Repository list
  • G2 reviews
  • 

• MindPoint Group and other services:

  • MindPoint Group
  • 
  • 

Repositories

CIS

---

|Links| |---| |CIS-Linux| |CIS-Windows| |CIS-Platform| |CIS-Applications|

---

CIS-Linux

---

|OS|Remediate|Audit| |--|--|--| |Amazon2|Amazon2-CIS|Amazon2-CIS-Audit| |Amazon2023|Amazon2023-CIS|Amazon2023-CIS-Audit| |DEBIAN11|DEBIAN11-CIS|DEBIAN11-CIS-Audit| |DEBIAN12|DEBIAN12-CIS|DEBIAN12-CIS-Audit| |DEBIAN13||| |RHEL8|RHEL8-CIS|RHEL8-CIS-Audit| |RHEL9|RHEL9-CIS|RHEL9-CIS-Audit| |RHEL10||| |SUSE15|SUSE15-CIS|SUSE15-CIS-Audit| |UBUNTU22|UBUNTU22-CIS|UBUNTU22-CIS-Audit| |UBUNTU24|UBUNTU24-CIS|UBUNTU24-CIS-Audit|

CIS-Windows

---

|OS|Remediate|Audit| |--|--|--| |Windows-10|Windows-10-CIS|| |Windows-11|Windows-11-CIS|| |Windows-2016|Windows-2016-CIS|Windows-2016-CIS-Audit| |Windows-2019|Windows-2019-CIS|Windows-2019-CIS-Audit| |Windows-2022|Windows-2022-CIS|| |Windows-2025|Windows-2025-CIS||

CIS-Platform

---

|OS|Remediate|Audit| |--|--|--| |Cisco-IOS-L2S|Cisco-IOS-L2S|N/A| |AWS-Foundations|AWS-Foundations|N/A| |Azure-CIS|Azure-CIS|N/A|

CIS-Applications

---

|Application|Remediate|Audit| |--|--|--| |Apache-2.4|[Apache-2.4-CIS]|N/A| |Postgres-12|[Postgres-12-CIS]|N/A| |Kubernetes1.6.1|[Kubernetes1.6.1-CIS]|N/A|

CIS-Archived

---

|OS| |--| |RHEL7-CIS| |UBUNTU18-CIS| |UBUNTU20-CIS|

---

STIG

---

|Links| |---| |STIG-Linux| |STIG-Windows| |STIG-Applications| |STIG-Archived|

---

STIG-Linux

---

|OS|Remediate|Audit| |--|--|--| |AMAZON2023||| |RHEL8|[RHEL8-STIG]|[RHEL8-STIG-Audit]| |RHEL9|[RHEL9-STIG]|[RHEL9-STIG-Audit]| |UBUNTU22|[UBUNTU22-STIG]|[UBUNTU22-STIG-Audit]| |UBUNTU24|[UBUNTU24-STIG]|[UBUNTU24-STIG-Audit]|

STIG-Windows

---

|OS|Remediate|Audit| |--|--|--| |Windows-10|[Windows-10-STIG]|N/A| |Windows-11|[Windows-11-STIG]|N/A| |Windows-2016|[Windows-2016-STIG]|N/A| |Windows-2019|[Windows-2019-STIG]|N/A| |Windows-2022|[Windows-2022-STIG]|N/A| |Windows-2025||N/A|

STIG-Applications

---

|Application|Remediate|Audit| |--|--|--| |Apache-2.4-STIG|[Apache-2.4-STIG]|N/A| |Cisco-IOS-L2S|[Cisco-IOS-L2S-STIG]|N/A| |Windows-Advanced-Firewall|[WinFWADV-STIG]|[WinFWADV-STIG-Audit]| |KUBERNETES-STIG|[KUBERNETES-STIG]|N/A|

STIG-Archived

---

|OS| |--| |[RHEL5-STIG]| |[RHEL6-STIG]| |[RHEL7-STIG]| |[UBUNTU18-STIG]| |[UBUNTU20-STIG]| |[Windows-2008R2-Member-Server-STIG]| |[Windows-2012-Member-Server-STIG]| |[Windows-2012-Domain-Controller-STIG]|

|Application| |--| |[Postgres-9-STIG]|

<!--- Following entries used for consistent links across the document ---> <!--- [CIS - Centre for Internet Security]: https://www.cisecurity.org [DISA STIG]: https://public.cyber.mil/stigs ---> <!--- CIS Repo links --->