Lynis
Lynis is a free host auditing tool used to scan Linux, macOS, and UNIX systems for hardening gaps for system administrators and defensive teams.
0 upvotes · 0 downvotes
No ratings yet
- Category
- Defensive Security & Monitoring
- Pricing
- Free
- Platforms
- LinuxmacOS
- License
- Open source
- Reviewed
- Last reviewed 25 October 2026
What it is
A shell-based auditor that runs on the host and checks configuration, patching, and hardening controls. It prints findings and suggestions the operator can act on.
What it helps with
- Auditing Linux and macOS hosts for common misconfigurations
- Producing hardening tips after a local scan
- Running recurring checks in automation
- Supporting compliance reviews with host-level evidence
Who it's for
System administrators, auditors, and blue team engineers hardening UNIX-like hosts.
Worth knowing
Windows support was withdrawn in 2022. Lynis is meant to run on the system under review, not as a remote network scanner.
Can it scan Windows?
No, official Windows support ended in 2022; use it on Linux, macOS, and other UNIX-like systems.
How does it compare with OpenSCAP?
In our view Lynis is a pragmatic host auditor, while OpenSCAP focuses on SCAP content and certified checks.
Discussion & reviews
0 comments
No contributions yet. Be the first to review or comment.