aartool

About

aartool audits a Linux host and shows which attack chains are complete end to end, instead of only listing separate findings. It produces an ordered plan of what to fix first and what each fix costs, applies changes only when the user types apply, then verifies that only the intended changes occurred. It includes 109 CIS checks, 52 Ansible roles, and SARIF and Prometheus output.