Skip to content
@ansible-lockdown

Ansible-Lockdown

Ansible-Lockdown is a security baseline automation project sponsored by MindPoint Group - A Quantum Sky Company (Formerly Tyto Athene)

Welcome to Ansible Lockdown

Org Stars Lockdown_followers Discord_active

Part of the Lockdown Suite by
MindPoint Group

Based upon the following products

Remediation Roles Audit Profiles
Ansible by RedHat Syver on GitHub
by RedHat
a fork of Goss

What is it?

Based upon industry recognized benchmarks and best practices, using leading products to enable highly adjustable configurations to bring your systems/platforms into security compliance.

  • Open Source (MIT licensed)
    • Community supported as standard
    • Enterprise support available
  • Configuration-as-code
    • Assist in bringing your systems/platform into compliance through the use of Ansible
    • Audit your current system/platform using Syver, a fork of Goss
  • Highly configurable to work with your systems

Content

CIS DISA-STIG
CIS Disa STIG
CIS Repos STIG Repos

Looking for support?

Useful Links

Repositories

CIS


Links
CIS-Linux
CIS-Windows
CIS-Platform
CIS-Applications

CIS-Linux


OS Remediate Audit
Amazon2 Amazon2-CIS Amazon2-CIS-Audit
Amazon2023 Amazon2023-CIS Amazon2023-CIS-Audit
DEBIAN11 DEBIAN11-CIS DEBIAN11-CIS-Audit
DEBIAN12 DEBIAN12-CIS DEBIAN12-CIS-Audit
DEBIAN13 DEBIAN13-CIS DEBIAN13-CIS-Audit
RHEL8 RHEL8-CIS RHEL8-CIS-Audit
RHEL9 RHEL9-CIS RHEL9-CIS-Audit
RHEL10 RHEL10-CIS RHEL10-CIS-Audit
SUSE15 SUSE15-CIS SUSE15-CIS-Audit
SUSE16 SUSE16-CIS SUSE16-CIS-Audit
UBUNTU22 UBUNTU22-CIS UBUNTU22-CIS-Audit
UBUNTU24 UBUNTU24-CIS UBUNTU24-CIS-Audit
UBUNTU26 Static Badge Static Badge

CIS-Windows


OS Remediate Audit
Windows-11 Windows-11-CIS Windows-11-CIS-Audit
Windows-2019 Windows-2019-CIS Windows-2019-CIS-Audit
Windows-2022 Windows-2022-CIS Windows-2022-CIS-Audit
Windows-2025 Windows-2025-CIS Windows-2025-CIS-Audit

CIS-Platform


OS Remediate Audit
Cisco-IOS-L2S Cisco-IOS-L2S N/A
AWS-Foundations AWS-Foundations N/A
Azure-CIS Azure-CIS N/A

CIS-Applications


Application Remediate Audit
Apache-2.4 Apache-2.4-CIS N/A
Postgres-12 Postgres-12-CIS N/A
Kubernetes1.6.1 Kubernetes1.6.1-CIS N/A

CIS-Archived


OS
RHEL7-CIS
UBUNTU18-CIS
UBUNTU20-CIS
Windows-2016-CIS
Windows-10-CIS

STIG


Links
STIG-Linux
STIG-Windows
STIG-Applications
STIG-Archived

STIG-Linux


OS Remediate Audit
AMAZON2023 AMAZON2023-STIG AMAZON2023-STIG-Audit
RHEL8 RHEL8-STIG RHEL8-STIG-Audit
RHEL9 RHEL9-STIG RHEL9-STIG-Audit
RHEL10 RHEL10-STIG RHEL10-STIG-Audit
UBUNTU22 UBUNTU22-STIG UBUNTU22-STIG-Audit
UBUNTU24 UBUNTU24-STIG UBUNTU24-STIG-Audit
UBUNTU26 Static Badge Static Badge

STIG-Windows


OS Remediate Audit
Windows-11 Windows-11-STIG SCC
Windows-2019 Windows-2019-STIG N/A
Windows-2022 Windows-2022-STIG SCC
Windows-2025 Windows-2025-STIG SCC

STIG-Applications


Application Remediate Audit
Apache-2.4-STIG Apache-2.4-STIG N/A
Cisco-IOS-L2S Cisco-IOS-L2S-STIG N/A
Windows-Advanced-Firewall WinFWADV-STIG WinFWADV-STIG-Audit
KUBERNETES-STIG KUBERNETES-STIG N/A
TOMCAT-9-STIG TOMCAT-9-STIG N/A
Cisco-IOS-RTR Cisco-IOS-RTR-STIG N/A

STIG-Archived


OS
RHEL5-STIG
RHEL6-STIG
RHEL7-STIG
UBUNTU18-STIG
UBUNTU20-STIG
Windows-2008R2-Member-Server-STIG
Windows-2012-Member-Server-STIG
Windows-2012-Domain-Controller-STIG
Windows-2016-STIG
Windows-10-STIG
Application
Postgres-9-STIG

Pinned Loading

  1. RHEL8-CIS RHEL8-CIS Public

    Automated CIS Benchmark Compliance Remediation for RHEL 8 with Ansible

    YAML 332 190

  2. RHEL9-CIS RHEL9-CIS Public

    Automated CIS Benchmark Compliance Remediation for RHEL 9 with Ansible

    YAML 221 147

  3. UBUNTU24-CIS UBUNTU24-CIS Public

    Automated CIS Benchmark Compliance Remediation for Ubuntu 24 with Ansible

    YAML 222 61

  4. Windows-2022-CIS Windows-2022-CIS Public

    Ansible CIS Benchmark Compliance Remediation for WINDOWS-2022

    YAML 126 51

  5. Windows-11-CIS Windows-11-CIS Public

    Automated CIS Benchmark Compliance Remediation for Windows 11 Enterprise with Ansible

    YAML 48 18

  6. RHEL9-STIG RHEL9-STIG Public

    Automated STIG Benchmark Compliance Remediation for RHEL 9 with Ansible

    Jinja 37 24

Repositories

Showing 10 of 98 repositories
  • github_windows_IaC Public

    💻 Workflow Data For Github Actions & Windows Server Testing of Lockdown Enterprise Content 💻

    ansible-lockdown/github_windows_IaC's past year of commit activity
    PowerShell 3 MIT 3 0 0 Updated Nov 1, 2026
  • github_linux_IaC Public

    💻 Workflow Data For Github Actions & Linux Server Testing of Lockdown Enterprise Content 💻

    ansible-lockdown/github_linux_IaC's past year of commit activity
    HCL 7 MIT 3 0 0 Updated Nov 1, 2026
  • MPG-AL-READTHEDOCS Public

    MindPoint Group - A Quantum Sky Company - Ansible-Lockdown ReadTheDocs

    ansible-lockdown/MPG-AL-READTHEDOCS's past year of commit activity
    4 MIT 1 0 0 Updated Oct 30, 2026
  • .github Public

    MindPoint Group - A Quantum Sky Company - Ansible-Lockdown Landing Page

    ansible-lockdown/.github's past year of commit activity
    7 2 0 0 Updated Oct 30, 2026
  • Windows-2025-CIS-Audit Public

    CIS Benchmark Compliance Audit for WINDOWS-2025 with Ansible & GOSS

    ansible-lockdown/Windows-2025-CIS-Audit's past year of commit activity
    YAML 1 MIT 0 0 1 Updated Oct 30, 2026
  • SUSE16-CIS Public

    Ansible CIS Benchmark Compliance Remediation for SUSE16

    ansible-lockdown/SUSE16-CIS's past year of commit activity
    YAML 1 MIT 0 0 0 Updated Oct 30, 2026
  • Windows-2025-STIG Public

    Automated STIG Benchmark Compliance Remediation for Windows Server 2025 with Ansible

    ansible-lockdown/Windows-2025-STIG's past year of commit activity
    YAML 1 MIT 0 0 0 Updated Oct 30, 2026
  • Windows-2019-CIS-Audit Public

    Automated CIS Benchmark Compliance Audit for Windows Server 2019 with Ansible & GOSS

    ansible-lockdown/Windows-2019-CIS-Audit's past year of commit activity
    YAML 12 MIT 7 0 1 Updated Oct 29, 2026
  • Windows-2022-STIG Public

    Automated STIG Benchmark Compliance Remediation for Windows Server 2022 with Ansible

    ansible-lockdown/Windows-2022-STIG's past year of commit activity
    YAML 16 MIT 13 0 0 Updated Oct 29, 2026
  • Windows-11-STIG Public

    Automated STIG Benchmark Compliance Remediation for Windows 11 Enterprise with Ansible

    ansible-lockdown/Windows-11-STIG's past year of commit activity
    YAML 11 MIT 1 0 0 Updated Oct 27, 2026