Lynis
Lynis: A low-cost host auditing tool for Linux and macOS hardening reviews. Ranked #10 of 27 in Security Configuration Management Software by our editors (7.8/10); pricing: Free plan; best for low-cost Linux and macOS hardening audits.
At a glance
- Editor score7.8 / 10
- PricingFree plan
- Best forLow-cost Linux and macOS hardening audits
- Free planYes
- Founded2007 · Vlijmen, The Netherlands
- Facts checked20 Sep 2026
Where it wins
- Free open-source auditing with CIS compliance testing
- Hundreds of built-in tests, profiles, plugins, and custom checks
- Scheduled scans plus Dockerfile auditing and Ansible integration
Where it doesn't
- Platform coverage centers on Linux and macOS
- Focused on guidance rather than automated remediation
- Centralized reporting and configuration management require Enterprise
Our verdict on Lynis
Lynis is an open-source, host-based security auditing tool for system administrators, developers, auditors, and penetration testers. It checks security weaknesses, compliance concerns, software configuration issues, and hardening opportunities on Linux, macOS, BSD, and other Unix-based systems. The standalone tool runs locally without additional dependencies and produces screen, log, and report-file output. Its scope suits teams that need practical system audits and hardening guidance rather than a broad, multi-platform configuration management suite.
The pricing structure starts with the free Lynis plan, which includes security auditing, compliance testing, system hardening, and custom tests and plugins. The Basic plan costs $1.50 per system per month and adds a dashboard and reporting, an implementation plan, and hardening advice. Premium costs $3 per system per month and adds file integrity monitoring, intrusion detection, configuration management, and compliance alongside dashboard and reporting. Centralized reporting, configuration management, and compliance policy features belong to Lynis Enterprise rather than the standalone tool, so buyers should distinguish the free command-line-oriented auditing experience from the paid administration layer.
Lynis stands out through the depth of its audit workflow: CIS benchmark testing, hundreds of built-in security tests, custom tests, plugins, profiles, baseline templates, scheduled cron-job scans, and Dockerfile auditing cover both recurring checks and tailored policies. Ansible integration can support operational workflows, but the product remains centered on assessment, warnings, suggestions, and hardening guidance. Organizations focused on Linux or macOS audits, low cost, and open-source tooling should find a clear fit. Teams needing wider platform coverage, verified automated remediation, or centralized management in the standalone product should consider a different approach or Lynis Enterprise.
Your product? Our editors can test Lynis in depth and publish a review, labelled as paid · from $149/mo →
Lynis pricing
All 3 Lynis plans and prices →
Lynis fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Not verified |
| Deployment model | Agent |
| CIS benchmarks | Yes |
| Configuration drift | Not verified |
| Automated remediation | No |
| Agentless assessment | No |
| Cloud infrastructure | Not verified |
| Policy as code | Not verified |
| Deployment | Cloud, Self-hosted |
| Platforms | Linux, macOS |
| Compliance & security | PCI DSS, HIPAA |
| Support | Email, Phone, Docs, Community |
| Built for | Solo, Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 1 integrations: Ansible |
| Pricing | Free plan (source) |
| Website | cisofy.com |
| Facts checked | 20 Sep 2026 |
Lynis integrations
Lynis lists 1 integrations on its own site.
- Ansible
Alternatives to Lynis
- PuppetA broad, policy-driven platform for enforcing, auditing, and remediating configurations.9.4
- Chef InSpecChef InSpec brings agentless policy-as-code assessment to systems, clouds, and infrastructure.9.1
- Qualys Policy ComplianceA broad compliance and drift-management platform for enterprise hybrid environments.8.9
Used Lynis? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Lynis for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Lynis is listed in our Security Configuration Management Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/lynis/"><img src="https://www.itechguides.com/best/badge/lynis.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update