cfn-nag
6.1#14 in infrastructure testing toolsFree planFree planLinuxmacOSSelf-hosted
Visitcfn-nag vs CIS-CAT Pro Assessor
CIS-CAT Pro Assessor
7.7#1 in database vulnerability scannersFrom $2,400 a yearFree planAPILinuxmacOSSelf-hosted
VisitWhat both publish
| Fact | cfn-nag | CIS-CAT Pro Assessor |
|---|---|---|
| Purpose | cfn-nag scans CloudFormation templates for patterns that may indicate insecure infrastructure. | CIS-CAT Pro Assessor scans systems and reports their compliance with CIS Benchmarks. |
cfn-nag plans
- cfn-nagFree
CIS-CAT Pro Assessor plans
- CIS-CAT LiteFree
- CIS SecureSuite End User (up to 99 employees)$2,400 a year
- CIS SecureSuite End User Membership (up to 99 employees)$2,400 a year
- CIS SecureSuite Controls Membership$3,600 a year
- CIS SecureSuite End User Membership (100–499 employees)$5,500 a year
- CIS SecureSuite End User (100–499 employees)$5,500 a year
Pick cfn-nag if…
It suits teams checking AWS CloudFormation templates for security-related patterns in local or pipeline workflows. Users who need custom checks can add rules, while those analyzing deployment parameters need to supply them separately.
Pick CIS-CAT Pro Assessor if…
It is intended for organizations that need to assess systems against CIS Benchmarks and map results to CIS Controls. End User membership is for internal organizational use, not client or commercial use.