STIG

This CIS Benchmark is the product of a community consensus process and consists of secure configuration guidelines developed for STIG

CIS Benchmarks are freely available in PDF format for non-commercial use:

Included in this Benchmark

Free Download

Safeguard IT systems against cyber threats with these CIS Benchmarks. Click to download a PDF from the list of available versions.

Learn more about CIS Benchmark

Recent versions available for CIS Benchmark:

Apache Server 2.4 Windows Server STIG (1.0.0)

Apache Tomcat Application Server 9 STIG (1.0.0)

Apple iOS/iPadOS 18 STIG (1.0.0)

Apple macOS 15 (Sequoia) STIG (1.0.0)

Apple macOS 14 (Sonoma) STIG (1.0.0)

Arista MLS EOS 4.X L2S STIG (1.0.0)

Arista MLS EOS 4.X NDM STIG (1.0.0)

Arista MLS EOS 4.X Router STIG (1.0.0)

BIND 9.x STIG (1.0.0)

Cisco ACI Layer 2 Switch STIG (1.0.0)

Cisco ACI NDM STIG (1.0.0)

Cisco ACI Router STIG (1.0.0)

Cisco IOS Router NDM STIG (1.0.0)

Cisco IOS Router RTR STIG (1.0.0)

Cisco IOS Switch L2S STIG (1.0.0)

Cisco IOS Switch NDM STIG (1.0.0)

Cisco IOS Switch RTR STIG (1.0.0)

Cisco IOS XE Router NDM STIG (1.0.0)

Cisco IOS XE Router RTR STIG (1.0.0)

Cisco IOS XE Switch L2S STIG (1.0.0)

Cisco IOS XE Switch NDM STIG (1.0.0)

Cisco IOS XE Switch RTR STIG (1.0.0)

Cisco IOS XR Router NDM STIG (1.0.0)

Cisco IOS XR Router RTR STIG (1.0.0)

Cisco NX OS Switch L2S STIG (1.0.0)

Cisco NX OS Switch NDM STIG (1.0.0)

Cisco NX OS Switch RTR STIG (1.0.0)

Dragos Platform 2.x STIG (1.0.0)

Forescout Network Access Control STIG (1.0.0)

Forescout Network Device Management STIG (1.0.0)

Google Android 15 COBO STIG (1.0.0)

Google Android 15 COPE STIG (1.0.0)

Google Android 14 COBO STIG (1.0.0)

Google Android 14 COPE STIG (1.0.0)

Google Android 13 COBO STIG (1.0.0)

Google Android 13 COPE STIG (1.0.0)

Honeywell Android 13 COBO STIG (1.0.0)

Honeywell Android 13 COPE STIG (1.0.0)

IBM WebSphere Liberty Server STIG (1.0.0)

IBM z/OS ACF2 STIG (1.0.0)

IBM z/OS RACF STIG (1.0.0)

IBM z/OS TSS STIG (1.0.0)

IBM zSecure Suite STIG (1.0.0)

Infoblox 8.x DNS STIG (1.0.0)

Juniper Router NDM STIG (1.0.0)

Juniper Router RTR STIG (1.0.0)

Juniper SRX Services Gateway ALG STIG (1.0.0)

Juniper SRX Services Gateway VPN STIG (1.0.0)

Juniper SRX SG IDPS STIG (1.0.0)

Juniper SRX SG NDM STIG (1.0.0)

MariaDB Enterprise 10.x STIG (1.0.0)

Microsoft DotNet Framework 4.0 STIG (1.0.0)

Microsoft Entra ID STIG (1.0.0)

Microsoft Exchange 2019 Edge Server STIG (1.0.0)

Microsoft Exchange 2019 Mailbox Server STIG (1.0.0)

Microsoft Exchange 2016 Edge Transport Server STIG (1.0.0)

Microsoft Exchange 2016 Mailbox Server STIG (1.0.0)

Microsoft Intune MDM Service Desktop & Mobile STIG (1.0.0)

Microsoft Office 365 ProPlus STIG (1.0.0)

Microsoft Office System 2016 STIG (1.0.0)

Microsoft SQL Server 2022 Database STIG (1.0.0)

Microsoft Windows 11 STIG (1.0.0)

Microsoft Windows 10 STIG (1.0.0)

Microsoft Windows Server 2022 STIG (3.0.0)

Microsoft Windows Server 2019 STIG (4.0.0)

Microsoft Windows Server 2016 STIG (4.0.0)

Microsoft Windows Server Domain Name System (DNS) STIG (1.0.0)

Motorola Solutions Android 13 COBO STIG (1.0.0)

Motorola Solutions Android 13 COPE STIG (1.0.0)

Mozilla Firefox STIG (1.0.0)

MS SQL Server 2016 Database STIG (1.0.0)

MS SQL Server 2016 Instance STIG (1.0.0)

Okta Identity as a Service (IDaaS) STIG (1.0.0)

Oracle Database 12c STIG (1.0.0)

Oracle Linux 8 STIG (1.0.0)

Oracle Linux 7 STIG (1.0.0)

Palo Alto Networks ALG STIG (1.0.0)

Palo Alto Networks IDPS STIG (1.0.0)

Palo Alto Networks NDM STIG (1.0.0)

Palo Alto Networks Prisma Cloud Compute STIG (1.0.0)

Samsung Android 15 BYOAD STIG (1.0.0)

Samsung Android OS 15 with Knox 3.x COBO STIG (1.0.0)

Samsung Android OS 15 with Knox 3.x COPE STIG (1.0.0)

Samsung Android OS 14 with Knox 3.x STIG (1.0.0)

Samsung Android OS 13 with Knox 3.x COBO STIG (1.0.0)

Samsung Android OS 13 with Knox 3.x COPE STIG (1.0.0)

Solaris 11 SPARC STIG (1.0.0)

Solaris 11 X86 STIG (1.0.0)

SUSE Linux Enterprise Server 15 STIG (1.0.0)

Tanium 7.x Application on TanOS STIG (1.0.0)

Tanium 7.x Operating System on TanOS STIG (1.0.0)

Tanium 7.x STIG (1.0.0)

VMware NSX 4.x Distributed Firewall STIG (1.0.0)

VMware NSX 4.x Manager NDM STIG (1.0.0)

VMware NSX 4.x Tier-1 Gateway Firewall STIG (1.0.0)

VMware NSX 4.x Tier-1 Gateway Router STIG (1.0.0)

VMware NSX 4.x Tier-0 Gateway Firewall STIG (1.0.0)

VMware NSX 4.x Tier-0 Gateway Router STIG (1.0.0)

VMware vSphere 8.0 ESXi STIG (1.0.0)

VMware vSphere 8.0 vCenter Appliance Envoy STIG (1.0.0)

VMware vSphere 8.0 vCenter Appliance ESX Agent Manager (EAM) STIG (1.0.0)

VMware vSphere 8.0 vCenter Appliance Lookup Service STIG (1.0.0)

VMware vSphere 8.0 vCenter Appliance Management Interface (VAMI) STIG (1.0.0)

VMware vSphere 8.0 vCenter Appliance Perfcharts STIG (1.0.0)

VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG (1.0.0)

VMware vSphere 8.0 vCenter Appliance PostgreSQL STIG (1.0.0)

VMware vSphere 8.0 vCenter Appliance Secure Token Service (STS) STIG (1.0.0)

VMware vSphere 8.0 vCenter Appliance User Interface (UI) STIG (1.0.0)

VMware vSphere 8.0 vCenter STIG (1.0.0)

VMware vSphere 8.0 Virtual Machine STIG (1.0.0)

VMware vSphere 7.0 ESXi STIG (1.0.0)

VMware vSphere 7.0 VAMI STIG (1.0.0)

VMware vSphere 7.0 vCenter Appliance EAM STIG (1.0.0)

VMware vSphere 7.0 vCenter Appliance Lookup Service STIG (1.0.0)

VMware vSphere 7.0 vCenter Appliance Perfcharts STIG (1.0.0)

VMware vSphere 7.0 vCenter Appliance Photon OS STIG (1.0.0)

VMware vSphere 7.0 vCenter Appliance PostgreSQL STIG (1.0.0)

VMware vSphere 7.0 vCenter Appliance RhttpProxy STIG (1.0.0)

VMware vSphere 7.0 vCenter Appliance STS STIG (1.0.0)

VMware vSphere 7.0 vCenter Appliance UI STIG (1.0.0)

VMware vSphere 7.0 vCenter STIG (1.0.0)

VMware vSphere 7.0 Virtual Machine STIG (1.0.0)

Xylok Security Suite 20.x STIG (1.0.0)

CIS Securesuite Members Only

Scan your systems against this CIS Benchmark to easily identify your conformance to the secure configuration recommendations.

Learn more about CIS-CAT Pro

Not a CIS SecureSuite member yet?

Apply for membership

Recent versions available for CIS-CAT Pro:

Microsoft Windows Server 2019 STIG (4.0.0)

CIS Securesuite Members Only

Automate your hardening efforts for STIG using Group Policy Objects (GPOs) for Microsoft Windows and Bash shell scripts for Unix and Linux environments.

Download CIS Build Kits

Not a CIS SecureSuite member yet?

Apply for membership

Recent versions available for CIS Build Kits:

Microsoft Windows Server 2022 STIG (3.0.0)

Microsoft Windows Server 2019 STIG (4.0.0)

Microsoft Windows Server 2016 STIG (4.0.0)

Looking for an older version?

Older versions of the CIS Benchmarks that are no longer supported by CIS and the CIS Benchmarks Community are not lised above. Access a list of archived CIS Benchmarks in Workbench .