Skip to main content

Applications / Middleware

Chef Premium Content has current coverage for 9 applications / middleware benchmarks, with every audit version and remediation version currently available. See benchmark coverage for how audit and remediation coverage are tracked, and the Compliance solution overview for what each does.

BenchmarkAudit versionsRemediation versionsCoverage
CIS Apache Tomcat 10v1.1.0—Audit Only
CIS Apache Tomcat 10.1v1.1.0v1.1.0Audit + Remediation
CIS Apache Tomcat 11v1.0.0—Audit Only
CIS Apache Tomcat 5.5v1.0.0—Audit Only
CIS Apache Tomcat 8v1.1.0v1.1.0Audit + Remediation
CIS Apache Tomcat 9—v1.1.0Remediation Only
CIS IBM WebSphere Libertyv1.0.0—Audit Only
CIS Microsoft Exchange Server 2016—v1.0.0Remediation Only
CIS Microsoft SharePoint 2016v1.1.0v1.1.0Audit + Remediation

For what each coverage term means, see how to read the coverage tables.

Inspect middleware configuration directly

Chef InSpec provides a RabbitMQ resource pack for inspecting RabbitMQ configuration. Chef doesn’t publish a prebuilt compliance benchmark for RabbitMQ — the resource pack is for authoring your own checks.

For the other technologies in this category, write controls using Chef InSpec core resources.

A resource pack isn’t a benchmark and doesn’t assess anything on its own. It provides the resources you use to write your own controls.

Thank you for your feedback!

×