3 ms·
"battle tested" how? Widely deployed? Red teamed and shown to actually help?
by yjftsjthsd-h 10mo ago
"battle tested" how? Widely deployed? Red teamed and shown to actually help?
- observationist 10mo agoThey've got a red-team type process they apply repeatedly, you have to piece things together from the changelogs to get a grasp on what they're doing. They've built a positive feedback loop on which to iterate improvements in security, and bundled it in a way to be used effectively with Ansible. They're following CIS guidelines, so if you're in a situation where that matters, it's probably a solid starting point for building things you need to have compliant and predictable. Could probably save weeks of effort, depending on the size of the team.
- schurzi 10mo agoDeployed and actively used by some larger european companies, we also got feedback from some US companies that use parts of our work to harden their systems.