REAL LAB RESULTS. NO CLIENT DATA.
A scan. A clear finding.
A verified recheck.
See how an assessment becomes a useful next step for your IT team. This example uses a dedicated Rocky Linux 9.8 lab server, two CIS Server profiles, and five custom policy checks.
PDF · 3 pages · September 2026 · Clearly labeled demonstration
What changed after the fixes
| Assessment | Initial | Recheck |
|---|---|---|
| CIS Level 1 Server | 110 failed rules | 108 failed rules |
| CIS Level 2 Server | 195 failed rules | 193 failed rules |
| Five custom controls | 2 failed controls | All 5 passed |
We corrected two login-banner files and restricted an example policy file’s permissions. The recheck confirmed those changes. The remaining CIS findings are still open: this demonstrates a focused fix-and-recheck process on a default lab machine.
A report your IT team can act on
The PDF shows the initial findings, suggested changes, and verified recheck results. It also states the tools, profile scope, and limitations, so a passing result is easy to understand in context.
The assessment used OpenSCAP 1.3.14, security content 0.1.82, and Cinc Auditor 7.2.1. The Rocky datastream adapts the CIS Red Hat Enterprise Linux 9 Benchmark v2.0.0. This is one verified lab configuration, not a certification or a test of every supported platform.
How this fits your service
Your initial CIS or custom assessment includes the first scan, reviewed findings and an Excel summary, then one follow-up scan within 30 days of the report. Your IT team makes the changes. If you add monthly scanning, I rerun that agreed configuration on the covered servers.