Skip to content
SPECIFICTION
Get listed

Lynis

cisofy.com

From $3/mo Free plan macOSLinuxSelf-hosted
Visit cisofy.com
Spec score 8.2 #7 of 29 in Security Configuration Management Software

What it is

Lynis performs security health scans to support system hardening and compliance testing on Linux, macOS, and Unix-based systems. Its stated uses also include security auditing, penetration testing, and vulnerability detection, for audiences such as developers, system administrators, IT auditors, and penetration testers. The tool checks components and tools found on each system through modular, opportunistic scans and is described as having almost no dependencies. It includes 300+ built-in tests and allows custom tests. Results appear on screen; technical details go to a log file, while warnings and suggestions are kept in a separate report. Lynis can help test security practices associated with CIS benchmarks, NIST, NSA, OpenSCAP data, and vendor guides. Listed systems include AIX, FreeBSD, HP-UX, Linux, macOS, NetBSD, NixOS, OpenBSD, and Solaris, along with Raspberry Pi, IoT, and QNAP devices. The free GPLv3 version costs nothing and comes without warranties or support. Lynis Enterprise SaaS is listed at $36 a year per system, billed annually; self-hosted Enterprise pricing is by quote.

Spec sheet

Purpose
Lynis performs security health scans to support system hardening and compliance testing on Linux, macOS, and Unix based systems.Read 4 Oct 2026 · cisofy.com
Intended users
The maker identifies developers, system administrators, IT auditors, and penetration testers as audiences for Lynis.Read 4 Oct 2026 · cisofy.com
Headquarters
Vlijmen, The NetherlandsRead 28 Sep 2026 · cisofy.com
Founded
2007Read 28 Sep 2026 · cisofy.com
Adaptive scanning
Its modular, opportunistic scans test components and tools found on the system, and the maker says it runs with almost no dependencies.Read 4 Oct 2026 · cisofy.com
Audit tests
Lynis includes hundreds of individual tests, and its features page specifies 300+ built-in tests as well as support for custom tests.Read 4 Oct 2026 · cisofy.com
Integration
Lynis can upload scan data to Lynis Enterprise, and the maker describes Lynis Collector as an Enterprise component that batches reports from multiple systems.Read 4 Oct 2026 · cisofy.com
Plugins
Plugins extend Lynis with additional tests and system information; the maker says some plugins are available to community users while others are for Enterprise customers.Read 4 Oct 2026 · cisofy.com
Reports
Lynis displays results on screen and writes technical details to a log file, with warnings and suggestions stored in a separate report file.Read 4 Oct 2026 · cisofy.com
Requirements
The download page lists shell and basic utilities as requirements and says normal-user or preferably root permissions are needed.Read 4 Oct 2026 · cisofy.com
Security and integrity
The download page states that the Lynis package is digitally signed and provides a SHA256 hash for integrity verification.Read 4 Oct 2026 · cisofy.com
Standards
The maker says Lynis can help automate or test security best practices from CIS benchmarks, NIST, NSA, OpenSCAP data, and vendor guides.Read 4 Oct 2026 · cisofy.com
Support limit
The documentation says the free Lynis version comes without warranties or support, while commercial support is available.Read 4 Oct 2026 · cisofy.com
Supported systems
Listed systems include AIX, FreeBSD, HP-UX, Linux, macOS, NetBSD, NixOS, OpenBSD, and Solaris; the maker also mentions Raspberry Pi, IoT, and QNAP devices.Read 4 Oct 2026 · cisofy.com
Use cases
The maker lists security auditing, compliance testing, penetration testing, vulnerability detection, and system hardening as typical uses.Read 4 Oct 2026 · cisofy.com

Plans and prices

Lynis Free Free and open source software · GPLv3 Read 4 Oct 2026 · cisofy.com
Lynis Enterprise - SaaS premium $36 a year $36.00 per system per year (= $3.00 per system/month, billed annually) For companies · SaaS · Security auditing · Dashboard and reporting · Implementation plan · Hardening advice · System integrity tests · Intrusion detection · Configuration management · Compliance and policies · API Read 5 Oct 2026 · cisofy.com
Lynis Enterprise - Self-hosted Priced on request Request a quote For companies · Hosted in your environment · Volume discount Read 4 Oct 2026 · cisofy.com

Every Lynis plan and price →

Strong points and limits

Strong points

  • Includes 300+ built-in tests and custom tests.
  • Scans components and tools found on a system.
  • Provides screen results, logs, and a separate report.
  • Can test practices from several named standards.

Limits

  • Free version comes without warranties or support.
  • Self-hosted Enterprise price requires a quote.
  • Normal-user or preferably root permissions are needed.

Who it suits

Lynis is aimed at developers, administrators, IT auditors, and penetration testers working on supported systems. It suits teams that can interpret scan reports and arrange support separately if using the free version.

Verdict

Lynis provides system scans and separate records for technical details, warnings, and suggestions. The free version has no support or warranty, so account for that when choosing a deployment.

Where Specifiction places it

Alternatives to LynisAll alternatives →