Broadly integrate compliance as code across your entire organization with fair, predictable pricing.
AMAZON Linux 2
AMAZON Linux 2023
Debian 12
Debian 11
RedHat Enterprise Linux (RHEL) 9
RHEL 8 / Rocky 8 / Alma 8
RHEL 7 / Rocky 7 / Alma 7
Ubuntu 24
Ubuntu 22
Ubuntu 20
Ubuntu 18
Windows 11
Windows 10
Windows Server 2022
Windows Server 2019
Windows Server 2016
Windows Firewall and Advanced Security
Azure
AWS Foundations
Kubernetes 1.6.1
Apache HTTP
Apache Tomcat 9
PostgreSQL 12
PostgreSQL 9
CISCO IOS L2S Switches
We can automate and support nearly any custom requirement.
Absolutely. Lockdown is brought to you by the MindPoint Group, a leading cybersecurity consulting firm with a long track record of successful assessments and implementations. Contact us for more information.
The easiest route is to use one of our GWACs. You can order Lockdown Enterprise directly from NASA SEWP. Contact our partners DLT or Fierce Software for more information.
False positives are a reality in security scanning. While we do our absolute best to account for different ways a scanner may check for compliance, invariably, there will be scenarios when your scanning tools mark something as vulnerable when it has indeed been remediated. If you have support, we'll be happy to issue a correction to the Role source to remediate the finding in a way that will placate your scanner.
By design, they're admittedly very close when it comes to capabilitiy. However, we put the supported version through additional testing, and then cryptographically sign the resulting content to prove source.
Nope! Lockdown content works from the CLI, or other mechanisms like AWX, RunDeck, etc.
No! In fact, a number of our customers currently use Puppet for day-to-day configuration management, but overlay Ansible and Lockdown for compliance remediation and baseline automation. However, understanding the basics of Ansible will make using Ansible Lockdown easier.
Ansible Lockdown is comprised of Ansible Role and Playbook files. They're all human-readable, and plain text.
When you request a download, we give you access to our git repository. From there you can clone the repo locally, or download a tarball for easy distribution internally.
A Ansible Lockdown Platform is just an operating system and baseline combination. i.e. RHEL 9 CIS. Windows Server 2016 STIG.
