Lynis Enterprise Suite
Lynis
Open source software provides trust by having people look into the code. Adjustments are easily made, providing you with a flexible solution for your business. But can you trust systems and software with your data? Lynis provides you this confidence and helps with auditing your systems. So you can verify yourself and trust!
How it works
Lynis is an open source security auditing tool. Its main goal is to audit and harden Unix and Linux based systems. It scans the system by performing many security control checks. Examples include searching for installed software
and determine possible configuration flaws.
Many tests are part of common security guidelines and standards, with on top additional security tests. After the scan a report will be displayed with all discovered findings. To provide you with initial guidance, a link is shared to the related Lynis control.
Example output:
The primary goal of Lynis is to perform a quick scan on your systems and determine room for improvement. Our Lynis Enterprise Suite is also using Lynis as a core component, however with much more functionality on top. Lynis Enterprise focuses on companies serious about their information security policy. Main audience is system administrators, security professionals and auditors working for these kind of companies.
| Fact sheet |
|
» Open Source (GPLv3) » Free to use » Well-known and mature » Big community of users » Packages/ports available » Used by individuals, businesses, government departments and multinationals |
| Quick links |
|
» Downloads » Lynis documentation |
Download Lynis
(Open Source and Free)
Lynis Enterprise
Lynis Enterprise begins, where Lynis stops. The Enterprise Suite also includes central management, reporting, action plans and security measurements.
Components
Central management
No more custom scripting or deploying systems without hardening going undetected.Reporting / Implementation Plan
The reporting capabilities are powerful. For example including an overview of the quick wins, or the group of systems with the highest risk rating. This makes it easy for you to determine your priorities. Just check the most important areas first and save a lot of time and efforts!Lynis Plugins
The software functionality can be extended with the help of plugins. Examples:
- Malware detection
- Forensics
- Heuristics
- System statistics
- Software
Integration
Centralized data can be exported and linked to existing systems. The bigger plans also include the use of an API, to easily export data.
Integration possibilities:
- SIEM solutions (event/incident logging)
- Configuration management and automation tools
- CMDB or other ITIL based tooling
Lynis Collector
The Enterprise solution includes Lynis Collector, a piece of software to handle central collection of data from all systems. Even if your systems do not have direct access to a WAN or internet link, the Collector can act as a proxy.
Support
Get implementation advice, guidance on hardening and see feature requests.
Lynis
Last, but not least, the proven auditing client Lynis. One of the core components in our solution and already used by thousands of companies and users. You don't want unstable software in your environment and we understand that!
Lynis remains open source and freely available. This way we give back to the community and people can audit their systems for free. At the same time everyone can audit our software. We are confident about our product offering. Join us!
Discover Pricing
(Good can be affordable!)Find weaknesses in your defenses has become easy with Lynis Enterprise Suite. Do you know yours?
Our Lynis tour below will provide you with more benefits.
Features
If you want to audit your environment, have a look at the features of the full suite.Configuration management
Perform in-depth technical audits to check if systems are really compliant.
System hardening
Tired of reading long benchmarks? Just run a security scan with Lynis and know your weaknesses. These findings are great input for your system hardening steps.
Technical auditing
With focus on Linux and Unix based systems, the Lynis suite includes a powerful security auditing tool. Check how well your patch management strategy is executed.
Also determine if your systems are really configured like you had intended during installation time.
Security incident detection and monitoring
With the right configuration and plugins, Lynis perform a really deep investigation. Almost like a forensics team! Traces of malware and malformed files can be detected.
New functionality
But we don't stop there. New functionality is continuously being added. Stay tuned!
Enterprise ready
Users of the Lynis Enterprise version will have additional tools and guidance. This includes additional explanations, scripts and examples on solving findings. For some of the plans this
also includes additional code snippets. This way you can make optimal use of your existing configuration management solutions (e.g. Cfengine, Puppet).
Compliance and regulations
Dealing with compliance and regulations? Lynis helps you with taking the right measures. Check the related controls and define your improvement plan. Support is available to audit controls
from standards like:
- Basel II
- GLBA
- HIPAA
- ISO27001/ISO27002
- PCI-DSS
- SOx (Sarbanes-Oxley)
Check our Demo
(Audit our promises!)
Lynis does more than simple baseline or compliance checking. Configuring a specific setting is simply not enough. That's why our software will also audit proper functioning of software. Don't just trust on compliance checks alone!
Examples of audit tests:- Available authentication methods
- Expired SSL certificates
- Outdated or vulnerable software packages
- Time configuration and proper functioning of NTP daemon
- User accounts without password
- Incorrect file permissions
- Configuration errors
- Firewall rules
We all know those software "solutions" with high requirements. Starting with a specific database engine, reporting software, a lot of storage and enough CPU cores... To make things worse, licenses for every single component. Not for Lynis!
Lynis is written in shell script. Therefore it runs on most systems, without any adjustments. No alterations, no installation and no third party tools needed. But.. if you still prefer to use software packages, that's completely fine with us!
Most security solutions only provide support for the common Linux versions. We simply love all Unix derived systems. Therefore we can support (almost) all of them. We are confident that Lynis run on systems which have the common GNU tools available. Feel free to test our promises!
Operatings systems which are confirmed to work:Operating systems
- AIX
- Arch Linux
- BackTrack Linux
- CentOS, ClearOS
- Debian, DragonFlyBSD
- Fedora Core, FreeBSD
- Gentoo
- HPUX
- Kali, Knoppix
- Linux Mint
- MacOS X, Mageia, Mandriva
- NetBSD
- OpenBSD, OpenSolaris, openSUSE, Oracle Linux
- PcBSD, PCLinuxOS
- Red Hat Enterprise Linux (RHEL) and derivatives
- Sabayon, Scientific Linux, Slackware, Solaris 10, SuSE
- TrueOS
- Ubuntu and derivatives
Lynis is already included in most software repositories. Also security, vulnerability and pentesting distributions include Lynis. For example Kali Linux, ArchAssault and BlackArch have Lynis available.
Other- Checkpoint GAiA
- Database servers: MySQL, Oracle, PostgreSQL
- E-mail servers: Postfix, Sendmail
- Identity management: OpenLDAP
- Proxy servers: Squid
- Time daemons: dntpd, ntpd, timed
- Web services: Apache, Nginx, PHP
Regulations are increasing, security incidents show up in the news almost daily. It's no wonder companies start to invest in security programs.
Affordable pricing
You like to be secured, we like to help! Our goal is to spread our technology to as much companies and individuals as possible. We keep Lynis open source, so individuals
and small companies can freely use the software.
Passion for Information Security
For companies who would like the full Lynis Enterprise suite, with additional options and support, we have very affordable pricing. We
aren't in for the money. We are here to help your business and improve the information security field!
Did we already mention we are passionate about our services?
Discover Pricing »
(Good can be very affordable)