aartool

aartool audits Linux hosts using 109 CIS-aligned checks and 52 Ansible roles to identify security findings, generates an ordered plan prioritizing vulnerabilities by reachability and cost, applies fixes selectively, and proves only intended changes were made. It supports local and remote hosts, outputs detailed explanations, integrates with CI, and provides reports and dashboards for ongoing security management.