Broadly integrate compliance as code across your entire organization with fair, predictable pricing.
AMAZON Linux 2
AMAZON Linux 2023
Debian 12 | 11
RHEL 9 | Rocky 9 | Alma 9
RHEL 8 | Rocky 8 | Alma 8
RHEL 7 | Rocky 7 | Alma 7
Ubuntu 24 | 22 | 20 | 18
Windows 11 Windows 1
Windows Server 2022 | 2019 | 2016
Windows Firewall and Advanced Security
Azure
AWS Foundations
Kubernetes 1.6.1
Apache HTTP
Apache Tomcat 9
PostgreSQL 12
PostgreSQL 9
CISCO IOS L2S Switches
We can automate and support nearly any custom requirement.
Absolutely. Lockdown Enterprise is brought to you by the MindPoint Group, a leading cybersecurity consulting firm that has a long track record of successful assessments and implementations. Contact us for more information.
The easiest route is to use one of our GWACs. You can order Lockdown Enterprise directly from NASA SEWP. Contact our partners DLT or Fierce Software for more information.
False positives are a reality in security scanning. While we do our absolute best to account for different ways a scanner may check for compliance, invariably, there will be scenarios when your scanning tools mark something as vulnerable when it has indeed been remediated. If you have support, we'll be happy to issue a correction to the Role source to remediate the finding in a way that will placate your scanner.
Automation Counselor is all about helping you implement and adopt automation across your organization. As part of a Counselor subscription, we also provide FULL support for all things Lockdown, including implementation assistance and prioritized bug fixes. And remember, false positives from your security team are always supported when you have a subscription.
By design, they're admittedly very close when it comes to capabilitiy. However, we put the supported version through additional testing, and then cryptographically sign the resulting content to prove source.
Nope! Lockdown Enterprise content works from the CLI, or other mechanisms like AWX, RunDeck, etc.
No! In fact, a number of our customers currently use Puppet for day-to-day configuration management, but overlay Ansible and Lockdown Enterprise for compliance remediation and baseline automation. However, understanding the basics of Ansible will make using Ansible Lockdown easier.
Ansible Lockdown is comprised of Ansible Role and Playbook files. They're all human-readable, and plain text.
Literally as many as you want. We don't want to limit your ability to secure your systems, but for supported instances, we limit you to one control node.
When you request a download, we give you access to our git repository. From there you can clone the repo locally, or download a tarball for easy distribution internally.
A Ansible Lockdown Platform is just an operating system and baseline combination. i.e. RHEL 9 CIS. Windows Server 2016 STIG.
