# ovh/debian-cis

PCI-DSS compliant Debian 11/12/13 hardening

Repository: https://github.com/ovh/debian-cis
Canonical: https://ross.abutalabs.com/products/debian-cis
Language: Shell
License: NOASSERTION
License Family: other
Topics: debian, audit, cis, pci-dss, security, shell
Last push: 2026-09-02T11:50:25+00:00

## Health v2 (maintenance only)
Score: 78/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 100, release rhythm 38, longevity 100
- inputs: {"age_days": 3787, "days_push": 0, "days_rel": 259, "gap_med": 163, "n_releases_24m": 2}
- flags: no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1060, forks 173 (observed 2026-09-03T02:15:16.640786+00:00)

## What it is
A set of modular shell scripts that audit and harden Debian 11/12/13 systems according to CIS security benchmarks, used in production at OVHcloud for PCI-DSS compliance. Each check can be run individually in audit-only or hardening mode with per-script configuration files.

## Use cases
- audit a debian server against CIS security benchmarks
- harden debian 12 for PCI-DSS compliance
- run automated security compliance checks on linux servers
- generate a conformity report of system hardening checks
- disable insecure kernel settings and filesystems per CIS recommendations
- check for duplicate users and groups on debian

## When to choose
- you run Debian 11/12/13 and need CIS benchmark auditing or remediation
- you must meet PCI-DSS hardening requirements on Debian hosts
- you want per-check configurable, scriptable security audits without agents

## When to avoid
- you need hardening for non-Debian distributions like Ubuntu, RHEL, or Alpine
- you want a GUI or centralized multi-host compliance dashboard
- you need CIS coverage for Debian 13's finalized official guide, which is still in development

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, configuration-management, cli, developer-tools
- domain: security, operating-systems, legal
- platform: linux, cli
- tags: cis-benchmark, hardening, pci-dss, audit, debian, compliance, shell-scripts, system-administration, devops, linux, shell

## Member repositories
- ovh/debian-cis (main) score 78

## Provenance
- Observed fields: from GitHub, fetched 2026-09-03T02:15:16.640786+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:57:59.844399+00:00, confidence not recorded.
  - readme: https://github.com/ovh/debian-cis (fetched 2026-09-03T02:15:16.640786+00:00, sha e6c15107e631)
- Data as of 2026-08-30T08:39:29.467469+00:00.