Lynis
Host security auditing & hardening tool.
KaliParrotLinuxpassive
pkg: lynis
Lynis audits the local Unix/Linux system for hardening gaps, misconfigurations and compliance issues.
Syntax
lynis audit system
Example
sudo lynis audit system
Runs a full local hardening audit and prints suggestions with a hardening index.
Advantages
- Excellent local hardening guidance
- Agentless and read-only
- Compliance-oriented reports
Disadvantages
- Local host only (not remote)
- Long suggestion lists to triage
- Best run with root
Tags
#hardening#audit#host
Official docs: Lynis ↗
Frequently asked questions
What is Lynis used for?
Lynis audits the local Unix/Linux system for hardening gaps, misconfigurations and compliance issues.
What is an example Lynis command?
A common example is: sudo lynis audit system — Runs a full local hardening audit and prints suggestions with a hardening index.
Is Lynis part of Kali Linux?
Yes. Lynis ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install lynis.
What category of security tool is Lynis?
Lynis is a Vulnerability Analysis tool with a passive-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.