Sold by: OpenNix, LLC
Deployed on AWS
Automated CIS Benchmark compliance scanning and hardening for Linux servers. Single-VM all-in-one deployment with web UI, scheduled scans, vulnerability detection, and Ansible-based remediation. Supports Ubuntu, Debian, RHEL, CentOS, AlmaLinux, Rocky, Amazon Linux, SLES, and Fedora.
Overview
SecureBaseline Cloud AIO is an all-in-one platform for automated CIS Benchmark compliance scanning, hardening, and monitoring of Linux servers. All components run on a single EC2 instance with no external databases or queues required.
Key Capabilities:
- Compliance Scanning - scan any reachable Linux host against CIS Benchmarks Level 1 and Level 2 profiles with per-rule pass/fail detail and overall compliance score
- Automated Hardening - apply CIS recommendations with preview mode before committing changes and granular per-rule enable/disable control
- Vulnerability Scanning - detect CVEs across managed hosts with advisories from NVD, OVAL, and FSTEC BDU
- Scheduled Compliance - cron-based scheduler for continuous monitoring and drift alerts
- Compliance Dashboard - web UI with per-host scores, trend tracking, and last-scan status
- Multi-OS Support - Ubuntu 22.04/24.04, Debian 11/12, RHEL/CentOS/Alma/Rocky 8-9, Amazon Linux 2/2023, SLES 15, openSUSE Leap, Fedora
Getting Started:
- Launch the EC2 instance from this listing (t3.xlarge recommended)
- Wait 3 minutes for first-boot configuration
- SSH in: sudo cat /var/lib/haas/credentials.txt
- Open https:// in browser
- Add your first managed host -- first scan in under 5 minutes
Useful for audit preparation: PCI DSS, SOC 2 Type II, ISO 27001.
Highlights
- Compliance Scanning - CIS Benchmark scanning for any reachable Linux host with per-rule detail and compliance scoring
- Automated Hardening - Apply CIS recommendations with safe preview mode before committing changes
- Continuous Monitoring - Scheduled scans with compliance drift alerting, vulnerability detection, and trend dashboards
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t3.xlarge Recommended | $0.25 |
c5.2xlarge | $0.40 |
c5.xlarge | $0.25 |
m6i.xlarge | $0.25 |
m5.xlarge | $0.25 |
m5.2xlarge | $0.40 |
t3.large | $0.15 |
m6i.2xlarge | $0.40 |
t3.2xlarge | $0.40 |
Dimensions summary
You pay by the hour based on the EC2 instance size you run. All nine dimensions cover the same platform for automated hardening and vulnerability scanning on Linux servers. They differ only by the compute instance you choose. Options span three instance families: t3 (t3.large, t3.xlarge, t3.2xlarge), m5 and m6i (m5.xlarge, m5.2xlarge, m6i.xlarge, m6i.2xlarge), and c5 (c5.xlarge, c5.2xlarge). Larger instances carry more CPU and memory, so your hourly rate scales with the size you pick. You are billed only for the hours each instance runs.
Top-of-mind questions for buyers
You are billed for each hour a chosen EC2 instance runs the platform. The unit is one instance-hour of that specific instance type. Larger instance types carry more CPU and memory, so the hourly rate differs by size. You pay only while the instance runs.
Software charges meter running time only. A stopped or powered-off instance does not accrue platform hourly charges. Underlying AWS storage fees for attached volumes may still apply while the instance is stopped, but those are separate from the software licence.
Each instance runs an automated hardening and vulnerability scanning platform for Linux servers. It performs CIS Benchmark compliance scanning, CVE vulnerability detection, and automated security hardening with per-rule control. All nine instance options deliver the same capabilities and differ only by compute size.
opennix.org
Helpful?
Vendor refund policy
No refunds are offered for this product. You may cancel at any time and billing will stop at the end of the current hour.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
CIS Benchmark compliance scanning, vulnerability detection, automated hardening, web dashboard, scheduled scans.
Additional details
Usage instructions
- Wait 3-5 minutes after launch for first-boot configuration.
- SSH: ssh ubuntu@public-ip.
- View credentials: sudo cat /var/lib/haas/credentials.txt.
- Open https://public-ip in browser. 5. Log in and add your first host.
Resources
Vendor resources
Support
Vendor support
Email support Monday through Friday, 09:00-18:00 UTC+4. Response within 1 business day. Documentation: https://opennix.org/en/docs/haas/ Email: support@opennix.org
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Sets essential controls for secure AWS projects, integrating compliance, secure defaults, audit tools, and monitoring across accounts. While aligning with best practices, it offers flexibility for specific regulation conformance post-implementation.
Red Hat Enterprise Linux 8 AMI with baseline operating system and latest security patches.
Oracle Linux 8 AMI with baseline operating system and the latest OS and security patches applied.
Rocky Linux 8 AMI with baseline operating system and the latest OS and security patches applied.
This product has charges associated with it for security hardening and compliance alignment. Madarson IT pre-hardened Ubuntu 22.04 LTS AMI with foundational security controls - deploy audit-ready EC2 instances aligned to NIST CSF, PCI DSS, and HIPAA frameworks in minutes.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.