TMAegis
en

Platforms

Find out what TMAegis can audit and harden: 16,927 rules across 96 platforms, from operating systems and databases to network devices and cloud.

Scan one platform

tmaegis scan --target <target>

Network devices: audit an exported configuration

tmaegis scan --target <target> --device-config <file>

Also list the checks that need manual review

tmaegis scan --target <target> --include-manual

96 platforms shown

Operating systems

Windows, Linux, macOS, Unix and mainframe systems. With --auto-detect, TMAegis picks the right platform for the machine it runs on.

Windows desktop and server

  • Windows (desktop and server)

    2,626 rules: 2,626 automated, 0 manual

    tmaegis scan --target windows
    View rules

Linux distributions

  • Azure Container Linux

    116 rules: 110 automated, 6 manual

    tmaegis scan --target azure-container-linux
    View rules

  • Bottlerocket

    30 rules: 26 automated, 4 manual

    tmaegis scan --target bottlerocket
    View rules

  • Container-Optimized OS

    119 rules: 72 automated, 47 manual

    tmaegis scan --target cos
    View rules

  • Linux distributions

    5,730 rules: 5,730 automated, 0 manual

    tmaegis scan --target linux
    View rules

macOS

  • macOS

    366 rules: 264 automated, 102 manual

    tmaegis scan --target macos
    View rules

Unix: AIX, Solaris and FreeBSD

  • FreeBSD

    148 rules: 135 automated, 13 manual

    tmaegis scan --target freebsd
    View rules

  • IBM AIX

    232 rules: 221 automated, 11 manual

    tmaegis scan --target aix
    View rules

  • Oracle Solaris

    92 rules: 83 automated, 9 manual

    tmaegis scan --target solaris
    View rules

Mainframe: IBM i and IBM Z

  • Db2 for z/OS

    78 rules: 0 automated, 78 manual

    tmaegis scan --target db2-zos --include-manual
    View rules

  • IBM CICS

    8 rules: 0 automated, 8 manual

    tmaegis scan --target cics --include-manual
    View rules

  • IBM i

    117 rules: 0 automated, 117 manual

    tmaegis scan --target ibm-i --include-manual
    View rules

  • IBM Z (z/OS)

    235 rules: 0 automated, 235 manual

    tmaegis scan --target ibm-z --include-manual
    View rules

Server software

Web and application servers, DNS and Kerberos, virtualization, containers and Kubernetes.

Web, application and collaboration servers

  • Apache HTTP Server

    86 rules: 60 automated, 26 manual

    tmaegis scan --target apache
    View rules

  • Apache Tomcat

    61 rules: 56 automated, 5 manual

    tmaegis scan --target tomcat
    View rules

  • IBM WebSphere

    113 rules: 79 automated, 34 manual

    tmaegis scan --target websphere
    View rules

  • Microsoft Exchange Server

    61 rules: 58 automated, 3 manual

    tmaegis scan --target exchange
    View rules

  • Microsoft IIS

    55 rules: 50 automated, 5 manual

    tmaegis scan --target iis
    View rules

  • Microsoft SharePoint Server

    42 rules: 13 automated, 29 manual

    tmaegis scan --target sharepoint
    View rules

  • NGINX

    46 rules: 34 automated, 12 manual

    tmaegis scan --target nginx
    View rules

DNS, Kerberos and directory services

  • BIND DNS

    51 rules: 41 automated, 10 manual

    tmaegis scan --target bind
    View rules

  • Kerberos

    9 rules: 9 automated, 0 manual

    tmaegis scan --target kerberos
    View rules

Virtualization, containers and Kubernetes

  • AKS Automatic

    33 rules: 12 automated, 21 manual

    tmaegis scan --target aks-automatic
    View rules

  • Amazon EKS

    47 rules: 28 automated, 19 manual

    tmaegis scan --target eks
    View rules

  • Amazon EKS Auto Mode

    34 rules: 15 automated, 19 manual

    tmaegis scan --target eks-auto
    View rules

  • Azure Kubernetes Service (AKS)

    50 rules: 24 automated, 26 manual

    tmaegis scan --target aks
    View rules

  • Docker

    119 rules: 88 automated, 31 manual

    tmaegis scan --target docker
    View rules

  • GKE Autopilot

    29 rules: 13 automated, 16 manual

    tmaegis scan --target gke-autopilot
    View rules

  • Google Kubernetes Engine (GKE)

    54 rules: 33 automated, 21 manual

    tmaegis scan --target gke
    View rules

  • Kubernetes

    134 rules: 74 automated, 60 manual

    tmaegis scan --target kubernetes
    View rules

  • LXD

    6 rules: 5 automated, 1 manual

    tmaegis scan --target lxd
    View rules

  • OpenShift Virtualization

    26 rules: 9 automated, 17 manual

    tmaegis scan --target openshift-virt
    View rules

  • Oracle Kubernetes Engine (OKE)

    43 rules: 20 automated, 23 manual

    tmaegis scan --target oke
    View rules

  • Red Hat OpenShift

    115 rules: 13 automated, 102 manual

    tmaegis scan --target openshift
    View rules

  • VMware ESXi

    268 rules: 186 automated, 82 manual

    tmaegis scan --target vmware
    View rules

Other server software

  • ROS (Robot Operating System)

    228 rules: 203 automated, 25 manual

    tmaegis scan --target ros
    View rules

Databases

Relational, NoSQL and distributed databases such as MySQL, PostgreSQL, SQL Server, Oracle and MongoDB.

Databases

  • Apache Cassandra

    21 rules: 14 automated, 7 manual

    tmaegis scan --target cassandra
    View rules

  • CockroachDB

    31 rules: 10 automated, 21 manual

    tmaegis scan --target cockroachdb
    View rules

  • IBM Db2

    215 rules: 133 automated, 82 manual

    tmaegis scan --target db2
    View rules

  • MariaDB

    75 rules: 45 automated, 30 manual

    tmaegis scan --target mariadb
    View rules

  • Microsoft SQL Server

    97 rules: 74 automated, 23 manual

    tmaegis scan --target mssql
    View rules

  • MongoDB

    27 rules: 20 automated, 7 manual

    tmaegis scan --target mongodb
    View rules

  • MySQL

    79 rules: 47 automated, 32 manual

    tmaegis scan --target mysql
    View rules

  • OceanBase

    42 rules: 23 automated, 19 manual

    tmaegis scan --target oceanbase
    View rules

  • Oracle Database

    98 rules: 85 automated, 13 manual

    tmaegis scan --target oracle-db
    View rules

  • PostgreSQL

    74 rules: 37 automated, 37 manual

    tmaegis scan --target postgres
    View rules

  • Redis

    8 rules: 8 automated, 0 manual

    tmaegis scan --target redis
    View rules

  • TDSQL

    106 rules: 55 automated, 51 manual

    tmaegis scan --target tdsql
    View rules

  • YugabyteDB

    54 rules: 31 automated, 23 manual

    tmaegis scan --target yugabytedb
    View rules

Desktop, browsers and Office

Browsers, Microsoft Office and other desktop applications.

Browsers

  • Apple Safari

    11 rules: 11 automated, 0 manual

    tmaegis scan --target safari
    View rules

  • Google Chrome

    118 rules: 105 automated, 13 manual

    tmaegis scan --target chrome
    View rules

  • Microsoft Edge

    148 rules: 148 automated, 0 manual

    tmaegis scan --target edge
    View rules

  • Mozilla Firefox

    57 rules: 57 automated, 0 manual

    tmaegis scan --target firefox
    View rules

Office and desktop applications

  • Microsoft Defender Antivirus

    59 rules: 59 automated, 0 manual

    tmaegis scan --target defender
    View rules

  • Microsoft Office

    241 rules: 241 automated, 0 manual

    tmaegis scan --target office
    View rules

  • Visual Studio Code

    6 rules: 5 automated, 1 manual

    tmaegis scan --target vscode
    View rules

  • Zoom

    177 rules: 2 automated, 175 manual

    tmaegis scan --target zoom
    View rules

Network devices

Audited from an exported configuration with --device-config. TMAegis never connects to the device.

Firewalls and security gateways

  • Check Point

    62 rules: 35 automated, 27 manual

    tmaegis scan --target checkpoint --device-config <file>
    View rules

  • Cisco ASA

    81 rules: 74 automated, 7 manual

    tmaegis scan --target cisco-asa --device-config <file>
    View rules

  • Cisco Secure Firewall (FTD)

    48 rules: 4 automated, 44 manual

    tmaegis scan --target cisco-ftd --device-config <file>
    View rules

  • Fortinet FortiGate

    67 rules: 54 automated, 13 manual

    tmaegis scan --target fortigate --device-config <file>
    View rules

  • OPNsense

    29 rules: 15 automated, 14 manual

    tmaegis scan --target opnsense --device-config <file>
    View rules

  • Palo Alto Networks

    81 rules: 52 automated, 29 manual

    tmaegis scan --target paloalto --device-config <file>
    View rules

  • pfSense

    37 rules: 21 automated, 16 manual

    tmaegis scan --target pfsense --device-config <file>
    View rules

  • Sophos Firewall

    40 rules: 0 automated, 40 manual

    tmaegis scan --target sophos --include-manual
    View rules

Routers and switches

  • Arista EOS

    33 rules: 29 automated, 4 manual

    tmaegis scan --target arista-eos --device-config <file>
    View rules

  • Cisco IOS

    87 rules: 64 automated, 23 manual

    tmaegis scan --target cisco-ios --device-config <file>
    View rules

  • Cisco IOS XR

    53 rules: 47 automated, 6 manual

    tmaegis scan --target cisco-iosxr --device-config <file>
    View rules

  • Cisco NX-OS

    65 rules: 38 automated, 27 manual

    tmaegis scan --target cisco-nxos --device-config <file>
    View rules

  • Extreme SLX-OS

    19 rules: 15 automated, 4 manual

    tmaegis scan --target extreme-slx --device-config <file>
    View rules

  • Fortinet FortiSwitch

    40 rules: 35 automated, 5 manual

    tmaegis scan --target fortiswitch --device-config <file>
    View rules

  • HPE Aruba CX

    80 rules: 33 automated, 47 manual

    tmaegis scan --target aruba-cx --device-config <file>
    View rules

  • Juniper Junos

    181 rules: 149 automated, 32 manual

    tmaegis scan --target juniper-junos --device-config <file>
    View rules

Load balancers

  • F5 BIG-IP

    30 rules: 24 automated, 6 manual

    tmaegis scan --target f5-bigip --device-config <file>
    View rules

Cloud and SaaS

Read-only checks of cloud accounts and SaaS tenants. Fixes are proposed as Terraform and never applied to your account.

Cloud platforms

  • Alibaba Cloud

    86 rules: 34 automated, 52 manual

    tmaegis scan --target alibaba
    View rules

  • Amazon Web Services

    366 rules: 26 automated, 340 manual

    tmaegis scan --target aws
    View rules

  • Google Cloud

    110 rules: 17 automated, 93 manual

    tmaegis scan --target gcp
    View rules

  • IBM Cloud

    81 rules: 8 automated, 73 manual

    tmaegis scan --target ibmcloud
    View rules

  • Microsoft Azure

    359 rules: 19 automated, 340 manual

    tmaegis scan --target azure
    View rules

  • Oracle Cloud Infrastructure

    55 rules: 46 automated, 9 manual

    tmaegis scan --target oci
    View rules

SaaS and developer platforms

  • GitHub

    120 rules: 31 automated, 89 manual

    tmaegis scan --target github
    View rules

  • Google Workspace

    97 rules: 3 automated, 94 manual

    tmaegis scan --target google-workspace
    View rules

  • Microsoft 365

    176 rules: 16 automated, 160 manual

    tmaegis scan --target m365
    View rules

  • Microsoft Power Platform

    22 rules: 5 automated, 17 manual

    tmaegis scan --target power-platform
    View rules

  • Oracle Fusion Cloud (SaaS)

    44 rules: 0 automated, 44 manual

    tmaegis scan --target oracle-saas --include-manual
    View rules

Mobile and device management

Mobile operating systems and Intune device-management baselines.

Mobile operating systems

  • Apple iOS

    106 rules: 0 automated, 106 manual

    tmaegis scan --target ios --include-manual
    View rules

  • Google Android

    47 rules: 1 automated, 46 manual

    tmaegis scan --target android
    View rules

Device management (Intune)

  • Intune: iOS/iPadOS

    94 rules: 0 automated, 94 manual

    tmaegis scan --target intune-ios --include-manual
    View rules

  • Intune: macOS

    100 rules: 0 automated, 100 manual

    tmaegis scan --target intune-macos --include-manual
    View rules

  • Intune: Microsoft Defender

    55 rules: 55 automated, 0 manual

    tmaegis scan --target intune-defender
    View rules

  • Intune: Microsoft Office

    238 rules: 237 automated, 1 manual

    tmaegis scan --target intune-office
    View rules

DevSecOps and supply chain

Source hosting, pipelines, the software supply chain and AI tooling.

Pipelines and supply chain

  • GitLab

    122 rules: 31 automated, 91 manual

    tmaegis scan --target gitlab
    View rules

  • MCP servers (AI tooling)

    55 rules: 24 automated, 31 manual

    tmaegis scan --target mcp-server
    View rules

  • Software supply chain

    124 rules: 12 automated, 112 manual

    tmaegis scan --target supply-chain
    View rules

Printers and storage

Network printers and storage arrays.

Printers

  • Network printers

    50 rules: 0 automated, 50 manual

    tmaegis scan --target printer --include-manual
    View rules

Storage

  • Pure Storage FlashArray

    36 rules: 12 automated, 24 manual

    tmaegis scan --target flasharray --device-config <file>
    View rules

Benchmark versions and audit methods for these 16,927 rules: Open the full coverage table