CIS-CAT Pro Assessor
CIS-CAT Pro Assessor scans local or remote systems and reports their alignment with CIS Benchmarks.
What CIS-CAT Pro Assessor is
CIS-CAT Pro Assessor scans local or remote systems and reports their alignment with CIS Benchmarks. Targets may be hosted on premises or in the cloud, and reports connect assessment results to CIS Controls and their three Implementation Groups. Teams can customize CIS Benchmarks in CIS WorkBench, export them as automated content, and assess systems against those tailored benchmarks. Windows and Linux download bundles are available; the Linux bundle without embedded Java also supports macOS. Use of the Assessor requires CIS SecureSuite membership. End User membership is intended for securing an organization’s internal systems and does not permit client or commercial use of membership resources. CIS-CAT Lite is a free alternative that offers unlimited scans against select technologies. For Microsoft 365 assessment, the Assessor supports Commercial Cloud tenants against the CIS Microsoft 365 Foundations Benchmark, but not other Microsoft 365 cloud environments.
Good
- Assesses local and remote targets.
- Maps results to CIS Controls groups.
- Custom benchmarks can be exported and assessed.
- Supports cloud and on-premises targets.
- CIS-CAT Lite offers unlimited scans against select technologies.
Watch out
- Requires CIS SecureSuite membership.
- No free trial is available.
- End User membership excludes client or commercial use.
- Other Microsoft 365 cloud environments are unsupported for this assessment.
Who it suits
It is intended for organizations that need to assess systems against CIS Benchmarks and map results to CIS Controls. End User membership is for internal organizational use, not client or commercial use.
Verdict
CIS-CAT Pro Assessor is suited to benchmark-based configuration assessment when an organization can meet its membership terms. Confirm the applicable membership tier and Microsoft 365 environment limits before adopting it.
Plans and prices
From CIS-CAT Pro Assessor's own pricing page, checked 15 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| CIS-CAT Lite | Free | unlimited scans · HTML reports · Windows 10, Google Chrome and Ubuntu benchmarks · free |
| CIS SecureSuite End User (up to 99 employees) | $2,400 a year | up to 99 employees · internal organizational use · no commercial use · 1-Year Total |
| CIS SecureSuite End User Membership (up to 99 employees) | $2,400 a year | Up to 99 employees · internal organizational use · no client or commercial use · 1-Year Total |
| CIS SecureSuite Controls Membership | $3,600 a year | Controls-focused membership · MSP, consultant and MSSP use · annual |
| CIS SecureSuite End User Membership (100–499 employees) | $5,500 a year | 100–499 employees · internal organizational use · no client or commercial use · 1-Year Total |
| CIS SecureSuite End User (100–499 employees) | $5,500 a year | 100–499 employees · internal organizational use · no commercial use · 1-Year Total |
| CIS SecureSuite End User (500–999 employees) | $7,900 a year | 500–999 employees · internal organizational use · no commercial use · 1-Year Total |
| CIS SecureSuite End User Membership (500–999 employees) | $7,900 a year | 500–999 employees · internal organizational use · no client or commercial use · 1-Year Total |
| CIS SecureSuite End User Membership (1,000–4,999 employees) | $10,900 a year | 1,000–4,999 employees · internal organizational use · no client or commercial use · 1-Year Total |
| CIS SecureSuite End User Membership (5,000–24,999 employees) | $12,800 a year | 5,000–24,999 employees · internal organizational use · no client or commercial use · 1-Year Total |
| CIS SecureSuite End User Membership (25,000–99,999 employees) | $15,200 a year | 25,000–99,999 employees · internal organizational use · no client or commercial use · 1-Year Total |
| CIS SecureSuite End User Membership (100,000+ employees) | $20,000 a year | 100,000+ employees · internal organizational use · no client or commercial use · 1-Year Total |
The facts
Each one read from CIS-CAT Pro Assessor's own pages, with the date it was checked.
What it does
- Alternative assessment
- CIS-CAT Lite is a free assessment tool with unlimited scans against select technologies.checked 2 Oct 2026
- API
- CIS publishes a SecureSuite Member API with token-authenticated endpoints to list bundles and download the latest or a specified assessor ZIP.checked 15 Oct 2026
- API example
- The API documentation shows GET endpoints for listing available CIS-CAT bundles and downloading versions by operating system, Java and GUI options.checked 15 Oct 2026
- Benchmark coverage
- The assessor uses automated content based on more than 100 globally recognized CIS Benchmarks.checked 15 Oct 2026
- Benchmark customization
- Users can tailor CIS Benchmarks in CIS WorkBench, export them as automated content, and assess against them.checked 2 Oct 2026
- Change: October 2026
- Version 4.67.0 was released on October 5, 2026 with new benchmark coverage and a Kubernetes probe security hardening change.checked 15 Oct 2026
- Command line
- The product provides a command-line interface alongside the graphical interface.checked 15 Oct 2026
- Configuration comparison
- The tool automatically compares target settings with the recommended settings in the selected CIS Benchmark.checked 15 Oct 2026
- Custom benchmarks
- Members can customize CIS Benchmarks in CIS WorkBench and export the resulting content for automated assessments.checked 15 Oct 2026
- Dashboard integration
- The assessor integrates with CIS-CAT Pro Dashboard and the CIS SecureSuite Platform for historical compliance views and dynamic reporting.checked 15 Oct 2026
- G2 review volume
- G2 lists 28 reviews for Center for Internet Security products, including CIS benchmark products and CIS-CAT-related feedback.checked 15 Oct 2026
- GUI availability
- The graphical interface is available on Windows and Mac, and it must run from a local drive.checked 15 Oct 2026
- Independent review
- NutterTools describes CIS-CAT Pro as a desktop assessment application for measuring systems against CIS Benchmarks and producing compliance evidence.checked 15 Oct 2026
- Intended audience
- End User membership is for organizations securing their internal systems and does not permit client or commercial use of membership resources.checked 2 Oct 2026
- License access
- Full Pro functionality and content require a CIS SecureSuite license, while an invalid or absent license limits the installation to CIS-CAT Lite behavior.checked 15 Oct 2026
- License model
- The assessor is distributed as a proprietary member download; the official pages describe embedded third-party open-source and commercial components but do not publish the assessor source under an open-source license.checked 15 Oct 2026
Where it runs
- CIS Controls mapping
- Reports map assessment findings to the CIS Critical Security Controls and their Implementation Groups.checked 15 Oct 2026
The company
- Company founding
- CIS was founded in 2000.checked 15 Oct 2026
- Company headquarters
- CIS lists its headquarters in East Greenbush, New York.checked 15 Oct 2026
- Company legal name
- Crunchbase lists the legal name as Center for Internet Security, Inc.checked 15 Oct 2026
- Company size
- LinkedIn lists CIS in the 501–1,000 employee range.checked 15 Oct 2026
- Company type
- CIS is described as a U.S. 501(c)(3) nonprofit organization.checked 15 Oct 2026
- Founded
- 2000checked 28 Sep 2026
- Headquarters
- East Greenbush, New York, United Stateschecked 28 Sep 2026
Alternatives to CIS-CAT Pro Assessor
- 1
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 2
DBX
Free planWeb7.2$19 one-time - 3
LevelBlue AppDetectivePRO
WebSelf-hostedWindows6.9 - 4
Defensia Database Security
Free planWebLinuxSelf-hosted6.7From €9 a month - 5
Onam Database Security
Free planWebAPISelf-hosted6.5From $22 a month - 6
DataSunrise
WebLinuxSelf-hostedWindows6.1