CIS Benchmarks

CIS (Center for Internet Security) Benchmarks are community-developed, consensus-based security configuration guidelines for operating systems, applications, network devices, and cloud platforms. They provide specific, step-by-step hardening recommendations that complement DISA STIGs and are widely used across both government and commercial environments.

CIS Benchmarks come in two profile levels: Level 1 (basic hardening with minimal operational impact) and Level 2 (stronger security that may restrict some functionality). They're available free for personal use and cover virtually every major technology platform.