What it does
Lynis is an open-source security-auditing tool for Linux, macOS and other Unix-like systems, with modular checks based on available components.
Lynis reports on the system it can actually inspect. Its modular scan uses available tools and components, so two machines can produce different coverage and findings. That is useful for administrators who need a hardening review without installing a large dependency stack. Read each recommendation in the context of the server's role before changing a setting. An audit finding is a work item to assess, not proof that every suggested change is appropriate or that a passing scan establishes compliance.
Strengths
- Component-aware modular auditing
Best for
- Unix-like system administrators planning hardening work