Docker Bench for Security
Docker Bench for Security is a free script used to check Docker hosts against CIS Docker Benchmark practices for platform and security teams.
0 upvotes · 0 downvotes
No ratings yet
- Category
- Cloud Security
- Pricing
- Free
- Platforms
- Linux
- License
- Open source
- Reviewed
- Last reviewed 25 October 2026
- Links
- GitHub
What it is
A shell script that runs dozens of automated checks based on the CIS Docker Benchmark on a Docker host. It reports pass and fail results for common deployment hardening mistakes.
What it helps with
- Auditing Docker host configuration against CIS guidance
- Finding exposed daemon sockets and weak container defaults
- Producing a quick baseline before a deeper review
- Running the same checks in automation on Linux hosts
Who it's for
Platform engineers and security teams hardening Docker hosts they operate.
Worth knowing
The latest tagged release is from December 2023, though the repository still received commits in 2026. It is intended for Linux Docker hosts.
Does it scan images for CVEs?
No, it checks host and daemon configuration; Trivy covers image vulnerabilities.
How does it compare with kube-bench?
In our view kube-bench targets Kubernetes CIS checks, while Docker Bench focuses on the Docker host benchmark.
Discussion & reviews
0 comments
No contributions yet. Be the first to review or comment.