CIS-CAT Pro Assessor vs Steampipe
CIS-CAT Pro Assessor
cisecurity.orgSteampipe
steampipe.ioSide by side
| Figure | CIS-CAT Pro Assessor | Steampipe |
|---|---|---|
| Price from | $200/mo | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 12 | 0 |
| Spec score · Security Configuration Management Software | 9.4 (#2) | 7.3 (#16) |
| Founded | 2000 | 2021 |
| Maker | The Center for Internet Security, Inc. describes itself as a 501(c)(3) nonprofit organization. | Turbot says it was founded in 2014 and is 100% bootstrapped. |
| Support | CIS SecureSuite membership includes technical product support, and the product page says dedicated Member Success Managers and enhanced technical support are available. | The maker directs users to documentation, the Steampipe Hub, and its Slack community. |
| What it does | CIS-CAT Pro Assessor scans local and remote systems against CIS Benchmark configuration recommendations and reports compliance. | Steampipe provides zero-ETL tools for querying APIs and services directly with SQL. |
Plans
CIS-CAT Pro Assessor
- CIS-CAT LiteFree
- CIS SecureSuite End User Membership (up to 99 employees)$2,400 a year
- CIS SecureSuite End User (up to 99 employees)$2,400 a year
- CIS SecureSuite Controls Membership$3,600 a year
- CIS SecureSuite End User (100–499 employees)$5,500 a year
- CIS SecureSuite End User Membership (100–499 employees)$5,500 a year
- CIS SecureSuite End User (500–999 employees)$7,900 a year
- CIS SecureSuite End User Membership (500–999 employees)$7,900 a year
- CIS SecureSuite End User Membership (1,000–4,999 employees)$10,900 a year
- CIS SecureSuite End User Membership (5,000–24,999 employees)$12,800 a year
In their own words
CIS-CAT Pro Assessor
CIS-CAT Pro Assessor has no write-up on Specifiction yet; its figures are above.
Steampipe
Steampipe provides open-source, zero-ETL tools for querying live data from APIs and services. Its CLI presents connected resources as relational tables, includes a PostgreSQL database and accepts SQL queries over dynamic information. Plugins implement the interface for each cloud service, file or other resource, so the relevant plugin is required. Steampipe can join live cloud configuration data with internal or external datasets for compliance, security, operations and cost work. Other distributions include PostgreSQL Foreign Data Wrappers, SQLite extensions that translate queries into API calls and standalone export CLIs that extract information without a database. Turbot Pipes offers hosted database instances, shared dashboards and snapshots. The plugin hub lists 157 plugins across public cloud, SaaS, security and software development categories. Installers are available for macOS, Linux and Windows, with API and self-hosted use also listed. Steampipe was founded in 2021; Turbot describes itself as founded in 2014 and bootstrapped. AWS access uses default credentials from a credential file or environment variables.