Lynis review
A low-cost host auditing tool for Linux and macOS hardening reviews.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Lynis is an open-source, host-based security auditing tool for system administrators, developers, auditors, and penetration testers. It checks security weaknesses, compliance concerns, software configuration issues, and hardening opportunities on Linux, macOS, BSD, and other Unix-based systems. The standalone tool runs locally without additional dependencies and produces screen, log, and report-file output. Its scope suits teams that need practical system audits and hardening guidance rather than a broad, multi-platform configuration management suite.
The pricing structure starts with the free Lynis plan, which includes security auditing, compliance testing, system hardening, and custom tests and plugins. The Basic plan costs $1.50 per system per month and adds a dashboard and reporting, an implementation plan, and hardening advice. Premium costs $3 per system per month and adds file integrity monitoring, intrusion detection, configuration management, and compliance alongside dashboard and reporting. Centralized reporting, configuration management, and compliance policy features belong to Lynis Enterprise rather than the standalone tool, so buyers should distinguish the free command-line-oriented auditing experience from the paid administration layer.
Lynis stands out through the depth of its audit workflow: CIS benchmark testing, hundreds of built-in security tests, custom tests, plugins, profiles, baseline templates, scheduled cron-job scans, and Dockerfile auditing cover both recurring checks and tailored policies. Ansible integration can support operational workflows, but the product remains centered on assessment, warnings, suggestions, and hardening guidance. Organizations focused on Linux or macOS audits, low cost, and open-source tooling should find a clear fit. Teams needing wider platform coverage, verified automated remediation, or centralized management in the standalone product should consider a different approach or Lynis Enterprise.
Lynis pros and cons
- Where it wins
- Free open-source auditing with CIS compliance testing
- Hundreds of built-in tests, profiles, plugins, and custom checks
- Scheduled scans plus Dockerfile auditing and Ansible integration
- Where it doesn't
- Platform coverage centers on Linux and macOS
- Focused on guidance rather than automated remediation
- Centralized reporting and configuration management require Enterprise
Lynis fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update