ubuntu secuirty scanners for servers ?

[Elixer]

Is there a good package that we can use to make sure we have the server as hardened as possible ?

 

[lxskllr]

DuckDuckGo gave me this, but I've never used it

http://www.unixmen.com/audit-the-security-of-your-unixlinux-systems-using-lynis/

 

[Elixer]

Thanks, will check it out.

 

[SecurityTheatre]

Honestly, Nessus does a pretty good job with this. There are policy scanners that can do authenticated scanning based on various profiels such as PCI audit, or a simple best practices.

Problem is that the free version of Nessus doesn't do it quite as well (if at all, i don't remember).

 

[JBT]

I'm not sure how many hosts you have but give Nexpose community Edition a try. Its limited to 30 for the community edition.

http://www.rapid7.com/products/nexpose/compare-downloads.jsp

 

[Elixer]

I'm not sure how many hosts you have but give Nexpose community Edition a try. Its limited to 30 for the community edition.

http://www.rapid7.com/products/nexpose/compare-downloads.jsp

It would just be for one host (for now)...

Thanks guys.

I was also told http://www.trapkit.de/tools/checksec.html is pretty good as well.