Skip to content
@ansible-lockdown

Ansible-Lockdown

Ansible-Lockdown is a security baseline automation project sponsored by MindPoint Group, A Quantum Sky Company.

Welcome to Ansible Lockdown

Org Stars Lockdown_followers Discord_active

Part of the Lockdown Suite by
MindPoint Group

Based upon the following products

Remediation Roles Audit Profiles
Ansible by RedHat Github hosted goss
by RedHat
Go Server Spec

What is it?

Based upon industry recognized benchmarks and best practices, using leading products to enable highly adjustable configurations to bring your systems/platforms into security compliance.

  • Open Source (MIT licensed)
    • Community supported as standard
    • Enterprise support available
  • Configuration-as-code
    • Assist in bringing your systems/platform into compliance through the use of Ansible
    • Audit your current system/platform using Goss
  • Highly configurable to work with your systems

Content

CIS DISA-STIG
CIS Disa STIG
CIS Repos STIG Repos

Looking for support?

Useful Links

Repositories

CIS


Links
CIS-Linux
CIS-Windows
CIS-Platform
CIS-Applications

CIS-Linux


OS Remediate Audit
Amazon2 Amazon2-CIS Amazon2-CIS-Audit
Amazon2023 Amazon2023-CIS Amazon2023-CIS-Audit
DEBIAN11 DEBIAN11-CIS DEBIAN11-CIS-Audit
DEBIAN12 DEBIAN12-CIS DEBIAN12-CIS-Audit
DEBIAN13 DEBIAN13-CIS DEBIAN13-CIS-Audit
RHEL8 RHEL8-CIS RHEL8-CIS-Audit
RHEL9 RHEL9-CIS RHEL9-CIS-Audit
RHEL10 RHEL10-CIS RHEL10-CIS-Audit
SUSE15 SUSE15-CIS SUSE15-CIS-Audit
SUSE16 Static Badge SUSE16-CIS-Audit
UBUNTU22 UBUNTU22-CIS UBUNTU22-CIS-Audit
UBUNTU24 UBUNTU24-CIS UBUNTU24-CIS-Audit
UBUNTU26 Static Badge Static Badge

CIS-Windows


OS Remediate Audit
Windows-11 Windows-11-CIS Static Badge
Windows-2019 Windows-2019-CIS Windows-2019-CIS-Audit
Windows-2022 Windows-2022-CIS Static Badge
Windows-2025 Windows-2025-CIS Static Badge

CIS-Platform


OS Remediate Audit
Cisco-IOS-L2S Cisco-IOS-L2S N/A
AWS-Foundations AWS-Foundations N/A
Azure-CIS Azure-CIS N/A

CIS-Applications


Application Remediate Audit
Apache-2.4 Apache-2.4-CIS N/A
Postgres-12 Postgres-12-CIS N/A
Kubernetes1.6.1 Kubernetes1.6.1-CIS N/A

CIS-Archived


OS
RHEL7-CIS
UBUNTU18-CIS
UBUNTU20-CIS
Windows-2016-CIS
Windows-10-CIS

STIG


Links
STIG-Linux
STIG-Windows
STIG-Applications
STIG-Archived

STIG-Linux


OS Remediate Audit
AMAZON2023 AMAZON2023-STIG AMAZON2023-STIG-Audit
RHEL8 RHEL8-STIG RHEL8-STIG-Audit
RHEL9 RHEL9-STIG RHEL9-STIG-Audit
RHEL10 RHEL10-STIG RHEL10-STIG-Audit
UBUNTU22 UBUNTU22-STIG UBUNTU22-STIG-Audit
UBUNTU24 UBUNTU24-STIG UBUNTU24-STIG-Audit
UBUNTU26 Static Badge Static Badge

STIG-Windows


OS Remediate Audit
Windows-11 Windows-11-STIG N/A
Windows-2019 Windows-2019-STIG N/A
Windows-2022 Windows-2022-STIG N/A
Windows-2025 Static Badge N/A

STIG-Applications


Application Remediate Audit
Apache-2.4-STIG Apache-2.4-STIG N/A
Cisco-IOS-L2S Cisco-IOS-L2S-STIG N/A
Windows-Advanced-Firewall WinFWADV-STIG WinFWADV-STIG-Audit
KUBERNETES-STIG KUBERNETES-STIG N/A
TOMCAT-9-STIG TOMCAT-9-STIG N/A
Cisco-IOS-RTR Cisco-IOS-RTR-STIG N/A

STIG-Archived


OS
RHEL5-STIG
RHEL6-STIG
RHEL7-STIG
UBUNTU18-STIG
UBUNTU20-STIG
Windows-2008R2-Member-Server-STIG
Windows-2012-Member-Server-STIG
Windows-2012-Domain-Controller-STIG
Windows-2016-STIG
Windows-10-STIG
Application
Postgres-9-STIG

Pinned Loading

  1. RHEL8-CIS RHEL8-CIS Public

    Automated CIS Benchmark Compliance Remediation for RHEL 8 with Ansible

    YAML 329 190

  2. RHEL9-CIS RHEL9-CIS Public

    Automated CIS Benchmark Compliance Remediation for RHEL 9 with Ansible

    YAML 217 147

  3. UBUNTU24-CIS UBUNTU24-CIS Public

    Automated CIS Benchmark Compliance Remediation for Ubuntu 24 with Ansible

    YAML 215 61

  4. Windows-2022-CIS Windows-2022-CIS Public

    Ansible CIS Benchmark Compliance Remediation for WINDOWS-2022

    YAML 122 52

  5. Windows-11-CIS Windows-11-CIS Public

    Automated CIS Benchmark Compliance Remediation for Windows 11 Enterprise with Ansible

    YAML 45 18

  6. RHEL9-STIG RHEL9-STIG Public

    Automated STIG Benchmark Compliance Remediation for RHEL 9 with Ansible

    Jinja 37 23

Repositories

Showing 10 of 98 repositories
  • github_linux_IaC Public

    💻 Workflow Data For Github Actions & Linux Server Testing of Lockdown Enterprise Content 💻

    ansible-lockdown/github_linux_IaC's past year of commit activity
    HCL 7 MIT 3 0 0 Updated Sep 23, 2026
  • github_windows_IaC Public

    💻 Workflow Data For Github Actions & Windows Server Testing of Lockdown Enterprise Content 💻

    ansible-lockdown/github_windows_IaC's past year of commit activity
    PowerShell 3 MIT 3 0 0 Updated Sep 23, 2026
  • Windows-2019-STIG Public

    Automated STIG Benchmark Compliance Remediation for Windows Server 2019 with Ansible

    ansible-lockdown/Windows-2019-STIG's past year of commit activity
    YAML 40 MIT 21 3 1 Updated Sep 23, 2026
  • Windows-10-STIG Public

    Automated STIG Benchmark Compliance Remediation for Windows 10 Enterprise with Ansible

    ansible-lockdown/Windows-10-STIG's past year of commit activity
    YAML 17 MIT 3 0 0 Updated Sep 24, 2026
  • Windows-2022-STIG Public

    Automated STIG Benchmark Compliance Remediation for Windows Server 2022 with Ansible

    ansible-lockdown/Windows-2022-STIG's past year of commit activity
    YAML 15 MIT 13 5 4 Updated Sep 23, 2026
  • Windows-11-CIS-Audit Public

    Audit Content for the Windows 11 CIS benchmark

    ansible-lockdown/Windows-11-CIS-Audit's past year of commit activity
    YAML 2 MIT 0 0 0 Updated Sep 23, 2026
  • SUSE16-CIS Public

    Ansible CIS Benchmark Compliance Remediation for SUSE16

    ansible-lockdown/SUSE16-CIS's past year of commit activity
    YAML 0 MIT 0 0 0 Updated Sep 23, 2026
  • SUSE16-CIS-Audit Public

    CIS Benchmark Compliance Audit for SUSE16 with Ansible & GOSS

    ansible-lockdown/SUSE16-CIS-Audit's past year of commit activity
    YAML 0 MIT 0 0 0 Updated Sep 22, 2026
  • RHEL9-CIS-Audit Public

    Automated CIS Benchmark Compliance Audit for RHEL 9 with Ansible & GOSS

    ansible-lockdown/RHEL9-CIS-Audit's past year of commit activity
    YAML 53 MIT 23 0 0 Updated Sep 22, 2026
  • Windows-2022-CIS Public

    Ansible CIS Benchmark Compliance Remediation for WINDOWS-2022

    ansible-lockdown/Windows-2022-CIS's past year of commit activity
    YAML 122 MIT 52 4 1 Updated Sep 22, 2026