Skip to main content

22 CIS benchmarks. 3,933 controls.

Every benchmark maintained by the Center for Internet Security, covering endpoints, cloud, containers, browsers and databases. Each one is a page below, with its controls, its scan mode and what it covers.

Total benchmarks
22 CIS benchmarks across 5 platform categories
Total controls
3,933 security controls evaluated
Scan mode
Agent-based for endpoints; agentless API for cloud and Kubernetes
Profiles supported
CIS Level 1 (L1) and Level 2 (L2) per benchmark
Frameworks mapped
NIST 800-53 Rev. 5, ISO/IEC 27001:2022 and SOC 2, on a CIS Controls v8 base
Update cadence
Continuous. New CIS versions added within the release cycle

Endpoint

7 benchmarks
BenchmarkVersionControlsTypeTier
v5.0.0 / v5.0.1560AgentAll
v4.0.0457AgentAll
v2.0.0535AgentAll
v1.0.0311AgentAll
v2.0.0296AgentAll
v1.1.0135AgentAll
v1.0.0141AgentAll

Cloud

4 benchmarks
BenchmarkVersionControlsTypeTier
v5.0.0155AgentlessAll
v6.0.0140AgentlessAll
v4.0.086AgentlessAll
v2.0.099AgentlessAll

Container & Orchestration

5 benchmarks
BenchmarkVersionControlsTypeTier
v1.12.0127AgentlessAll
v1.8.0118AgentAll
v1.8.049AgentlessAll
v1.8.048AgentlessAll
v1.9.0111AgentlessAll

Browser

4 benchmarks
BenchmarkVersionControlsTypeTier
v3.0.0117AgentAll
v4.0.0128AgentAll
v1.0.062AgentAll
v1.0.0156AgentAll

Database & Web Server

2 benchmarks
BenchmarkVersionControlsTypeTier
v1.2.147AgentAll
v1.2.155AgentAll

Need a benchmark we don't cover yet?

We continuously add new benchmarks. Contact us to discuss your specific compliance requirements.