Show HN: Aartool, Audit a Linux host and see which attack chains are complete

Category: security

Tags: security, linux, hardening, ansible, audit

Score: 6.5/10 (Innovation: 6, Technical: 6, Documentation: 8, Utility: 6)

Aartool is a Linux host auditing and hardening tool that goes beyond simple scanning by providing prioritized remediation plans, explanations of each finding's cost, and safe apply/diff workflows. It combines a dependency-free audit script, CIS-aligned Ansible roles, and an offline dashboard to bridge the gap between knowing what's wrong and actually fixing it without breaking services.

Target audience: devops, sysadmins, security engineers

Repository: https://github.com/cyberaar/aartool · Shell · GPL-3.0 · 15 stars

View on Hacker News