OpenMSP
Lynis logo

Lynis

Endpoint Security (Antivirus/EPP)

Open Source
Free Tier
E
Enterprise
Self-hosted
OpenMSP Score
33
12
Reddit Impact Score
Github Score
90M
15KStars
1KForks
3KCommits
GNU General Public License v3.0License
Jan 28, 2026Last commit

Alternative Vendors

Osquery
Osquery
ClamAV
ClamAV
Velociraptor
Velociraptor

Commercial Alternatives

Todyl
Todyl
Webroot Endpoint Protection
Webroot Endpoint Protection
Bitdefender GravityZone
Bitdefender GravityZone
Sophos Intercept X
Sophos Intercept X
Lynis is an open source security auditing tool for Unix/Linux systems that performs comprehensive system health scans. Available since 2007, it helps system administrators, auditors, and security professionals assess security defenses and provides guidance for system hardening. The tool supports compliance testing for standards like HIPAA, ISO27001, and PCI DSS. While the core tool is free and open source under GPL license, CISOfy offers Lynis Enterprise with additional plugins, central management, and commercial support.
image media
1 / 2

Key Features

Comprehensive Security Scanning

Performs in-depth security audits covering 250+ security tests including system hardening, compliance checks, and vulnerability detection

Compliance Testing Support

Supports compliance testing for major standards including HIPAA, ISO27001, PCI DSS, and SOX with detailed reporting

Cross-Platform Compatibility

Runs on Linux, macOS, FreeBSD, OpenBSD, Solaris, AIX, and other Unix-based systems with no dependencies required

Hardening Index Scoring

Provides unique hardening index score to measure system security posture and track improvements over time

Agentless Operation

Lightweight shell script implementation that requires no installation and can run from extracted archive

Pros and Cons

Pros

Open Source and Free

Completely free to use with full functionality under GPL license, no vendor lock-in

Battle-Tested Maturity

Maintained since 2007 with millions of downloads and used by thousands of organizations worldwide

Comprehensive Testing

Covers 250+ security tests across all major Unix/Linux security areas with detailed guidance

No Dependencies Required

Lightweight shell script that runs without installation or additional software dependencies

Cons

Command Line Only

No native graphical user interface, requires command-line knowledge for operation

Limited Windows Support

Primarily designed for Unix/Linux systems, no native Windows support

Basic Reporting in Free Version

Advanced reporting and central management require paid Enterprise version

Feature Comparison

Comments

No Comments Yet

Be the first to share your experience with Lynis.