CIS-CAT Pro Assessor
7.7#1 in database vulnerability scannersFrom $2,400 a yearFree planAPILinuxmacOSSelf-hosted
VisitCIS-CAT Pro Assessor vs Serverspec
Serverspec
6.0#18 in infrastructure testing toolsFree planFree planLinuxmacOSSelf-hostedWindows
VisitWhat both publish
| Fact | CIS-CAT Pro Assessor | Serverspec |
|---|---|---|
| Maker | The Center for Internet Security, Inc. describes itself as a 501(c)(3) nonprofit organization. | The official site says the project is maintained by Gosuke Miyashita. |
| Operating systems | The documented target OS families are Microsoft Windows, Linux distributions and macOS. | The tutorial lists AIX, Arch Linux, macOS, Debian, Fedora/Red Hat/CentOS, FreeBSD, Gentoo Linux, NixOS, OpenBSD, openSUSE, Plamo Linux, SmartOS, Solaris, SUSE, Ubuntu, and Windows, while noting that not all are fully supported. |
| Purpose | CIS-CAT Pro Assessor scans systems and reports their compliance with CIS Benchmarks. | Serverspec lets users write RSpec tests to check that servers are configured correctly. |
CIS-CAT Pro Assessor plans
- CIS-CAT LiteFree
- CIS SecureSuite End User (up to 99 employees)$2,400 a year
- CIS SecureSuite End User Membership (up to 99 employees)$2,400 a year
- CIS SecureSuite Controls Membership$3,600 a year
- CIS SecureSuite End User Membership (100–499 employees)$5,500 a year
- CIS SecureSuite End User (100–499 employees)$5,500 a year
Serverspec plans
- ServerspecFree
Pick CIS-CAT Pro Assessor if…
It is intended for organizations that need to assess systems against CIS Benchmarks and map results to CIS Controls. End User membership is for internal organizational use, not client or commercial use.
Pick Serverspec if…
Serverspec suits teams that want to verify deployed server configuration with Ruby and RSpec tests. It can complement configuration tools such as Puppet or Ansible.