available-sca-policies.rst

Available SCA policies

The table below shows SCA policies pre-installed in Wazuh out-of-the-box. The Wazuh agent only installs the policy file that is applicable to the endpoint operating system:

Available SCA policies

Policy	Name	Target
cis_win2012r2	CIS Benchmark for Windows 2012 R2	Windows Server 2012 R2
cis_win10_enterprise	CIS Benchmark for Windows 10 Enterprise	Windows 10
cis_win11_enterprise	CIS Benchmark for Windows 11 Enterprise	Windows 11
cis_win2016	CIS Benchmark for Windows Server 2016	Windows Server 2016
cis_win2019	CIS Benchmark for Windows Server 2019 RTM	Windows Server 2019
cis_win2022	CIS Benchmark for Windows Server 2022	Windows Server 2022
sca_win_audit	Benchmark for Windows auditing	Windows
cis_centos6_linux	CIS Benchmark for CentOS 6	CentOS 6
cis_centos7_linux	CIS Benchmark for CentOS 7	CentOS 7
cis_centos8_linux	CIS Benchmark for CentOS 8	CentOS 8
cis_rhel5_linux	CIS Benchmark for Red Hat Enterprise Linux 5	Red Hat Enterprise Linux 5
cis_rhel6_linux	CIS Benchmark for Red Hat Enterprise Linux 6	Red Hat Enterprise Linux 6
cis_rhel7_linux	CIS Benchmark for Red Hat Enterprise Linux 7	Red Hat Enterprise Linux 7
cis_rhel8_linux	CIS Benchmark for Red Hat Enterprise Linux 8	Red Hat Enterprise Linux 8
cis_rhel9_linux	CIS Benchmark for Red Hat Enterprise Linux 9	Red Hat Enterprise Linux 9
cis_debian7	CIS Benchmark for Debian/Linux 7	Debian 7
cis_debian8	CIS Benchmark for Debian/Linux 8	Debian 8
cis_debian9	CIS Benchmark for Debian/Linux 9	Debian 9
cis_debian10	CIS Benchmark for Debian/Linux 10	Debian 10
cis_ubuntu14-04	CIS Checks for Ubuntu Linux 14.04 LTS	Ubuntu 14.04
cis_ubuntu16-04	CIS Checks for Ubuntu Linux 16.04 LTS	Ubuntu 16.04
cis_ubuntu18-04	CIS Checks for Ubuntu Linux 18.04 LTS	Ubuntu 18.04
cis_ubuntu20-04	CIS Checks for Ubuntu Linux 20.04 LTS	Ubuntu 20.04
cis_ubuntu22-04	CIS Checks for Ubuntu Linux 22.04 LTS	Ubuntu 22.04
cis_sles11_linux	CIS SUSE Linux Enterprise 11 Benchmark	SUSE 11
cis_sles12_linux	CIS SUSE Linux Enterprise 12 Benchmark	SUSE 12
cis_sles15_linux	CIS Checks for SUSE SLES 15	SUSE 15
cis_amazon_linux_1	CIS Checks for Amazon Linux 1	Amazon Linux 1
cis_amazon_linux_2	CIS Checks for Amazon Linux 2	Amazon Linux 2
cis_solaris11	CIS Benchmark for Oracle Solaris 11	Solaris 11
cis_solaris11.4	CIS Checks for Oracle Solaris 11.4	Solaris 11.4
sca_unix_audit	Benchmark for Linux auditing	Unix based OS
cis_apple_macOS_10.11	CIS Apple macOS 10.11 Benchmark	macOS 10.11 (El Capitan)
cis_apple_macOS_10.12	CIS Apple macOS 10.12 Benchmark	macOS 10.12 (Sierra)
cis_apple_macOS_10.13	CIS Apple macOS 10.13 Benchmark	macOS 10.13 (High Sierra)
cis_apple_macOS_10.14	CIS Checks for macOS 10.14	macOS 10.14 (Mojave)
cis_apple_macOS_10.15	CIS Checks for macOS 10.15	macOS 10.15 (Catalina)
cis_apple_macOS_11.1	CIS Checks for macOS 11.x	macOS 11.x (Big Sur)
cis_apple_macOS_12.0	CIS Checks for macOS 12.x	macOS 12.0 (Monterey)
cis_apple_macOS_13.x	CIS Checks for macOS 13.x	macOS 13.x (Ventura)
web_vulnerabilities	System audit for web-related vulnerabilities	N/A
cis_apache_24	CIS Apache HTTP Server 2.4 Benchmark	Apache configuration files
cis_mysql5-6_community	CIS Benchmark for Oracle MySQL Community Server 5.6	MySQL configuration files
cis_mysql5-6_enterprise	CIS Benchmark for Oracle MySQL Enterprise 5.6	MySQL configuration files
cis_sqlserver_2012	CIS Microsoft SQL Server 2012	Microsoft SQL Server 2012
cis_sqlserver_2014	CIS Microsoft SQL Server 2014	Microsoft SQL Server 2014
cis_sqlserver_2016	CIS Microsoft SQL Server 2016	Microsoft SQL Server 2016
cis_sqlserver_2017	CIS Microsoft SQL Server 2017	Microsoft SQL Server 2017
cis_sqlserver_2019	CIS Microsoft SQL Server 2019	Microsoft SQL Server 2019
cis_iis_10	CIS Checks for Microsoft IIS 10	Microsoft IIS 10
cis_mongodb_36	CIS Checks for MongoDB	MongoDB 3.6
cis_nginx_1	CIS Benchmark for NGINX	NGINX 1.14.0
cis_oracle_database_19c	CIS Checks for Oracle Database 19c	Oracle Database 19c
cis_postgre-sql-13	CIS Checks for PostgreSQL 13	PostgreSQL 13