Audience
Insititutions requiring client-less technology that requires no software agents
About ConfigOS
ConfigOS is currently implemented in classified and unclassified environments, tactical and weapon system programs, disconnected labs, and the commercial cloud. ConfigOS is client-less technology, requiring no software agents. ConfigOS scans endpoint systems and remediates hundreds of STIG controls in under 90 seconds. Automated remediation rollback as well as comprehensive compliance reporting and STIG Viewer Checklist output are provided. ConfigOS was designed to harden every CAT 1/2/3 STIG control around an application baseline in about 60 minutes - typically eliminating weeks or months from the RMF accreditation timeline. ConfigOS addresses Microsoft Windows workstation and server operating systems, SQL Server, IIS, IE, Chrome, and all of the Microsoft Office components. The same instance of ConfigOS addresses Red Hat 5/6/7, SUSE, Ubuntu, and Oracle Linux. ConfigOS content includes over 10,000 STIG and CIS controls. New functionality in Command Center includes a patent-pend
Other Popular Alternatives & Related Software
ConfigCobra
ConfigCobra is a CIS-certified SaaS that automates security compliance assessments for Microsoft 365 using the CIS Microsoft 365 Foundations Benchmark. It scans your tenant against CIS controls, detects configuration drift, and provides clear, actionable remediation guidance for every finding. Customers can run on-demand assessments or schedule recurring scans for continuous compliance monitoring, and generate CIS-certified, audit-ready PDF reports with evidence. ConfigCobra integrates with Microsoft Entra ID for secure access and uses Microsoft APIs to evaluate tenant configuration without making changes.
Learn more
AWS Config
AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. With Config, you can review changes in configurations and relationships between AWS resources, dive into detailed resource configuration histories, and determine your overall compliance against the configurations specified in your internal guidelines. This enables you to simplify compliance auditing, security analysis, change management, and operational troubleshooting. AWS Config is designed to be your primary tool to perform configuration audit and compliance verification of both your AWS and third-party resources. You can publish the configuration of third-party resources such as GitHub repositories, Microsoft Active Directory resources, or any on-premises server into AWS.
Learn more
rConfig
rConfig is network configuration management software that helps teams back up devices, track changes and recover configurations.
Manage routers, switches, firewalls and other devices from multiple vendors in one clear web interface. Schedule backups, search saved configs and compare versions to see what changed. Capture routing, MAC and ARP tables to help investigate network faults.
Paid editions add configuration deployment, recovery workflows, compliance checks and support. Advanced options include AI for config analysis and a Script Integration Engine for custom automation. REST APIs connect rConfig to your existing tools. Vector supports distributed networks across sites and customers.
Built in Ireland, rConfig runs on your own infrastructure. Free, open source rConfig Core has no device licence limit, with paid editions available as your needs grow.
Download Core or book a demo at rconfig.com
Learn more
SaltStack
SaltStack is an intelligent IT automation platform that can manage, secure, and optimize any infrastructure—on-prem, in the cloud, or at the edge. It’s built on a unique and powerful event-driven automation engine that detects events in any system and reacts intelligently to them, making it an extremely effective solution for managing large, complex environments.
With the newly launched SecOps offering, SaltStack can detect security vulnerabilities and non-compliant, mis-configured systems. As soon as an issue is detected, this powerful automation helps you and your team remediate it, keeping your infrastructure securely configured, compliant, and up-to-date.
The SecOps suite includes both Comply and Protect. Comply scans and remediates against CIS, DISA-STIG, NIST, PCI, HIPAA compliance standards. And Protect scans for vulnerabilities and patches and updates your operating systems.
Learn more
Integrations
Company Information
SteelCloud
Founded: 1987
United States
www.steelcloud.com
Videos and Screen Captures
Other Useful Business Software
$300 Free Credits to Build on Google Cloud
Put your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
Product Details
Platforms Supported
Cloud
Windows
Training
Documentation
Live Online
Webinars
In Person
Support
Phone Support
Online
ConfigOS Frequently Asked Questions
ConfigOS Product Features
Compliance
Audit Management
Compliance Tracking
Controls Testing
Risk Management
Archiving & Retention
Artificial Intelligence (AI)
Environmental Compliance
FDA Compliance
HIPAA Compliance
ISO Compliance
Incident Management
OSHA Compliance
Sarbanes-Oxley Compliance
Surveys & Feedback
Version Control
Workflow / Process Automation
Cybersecurity
Endpoint Management
Incident Management
Vulnerability Scanning
AI / Machine Learning
Behavioral Analytics
IOC Verification
Tokenization
Whitelisting / Blacklisting
Endpoint Protection
Activity Log
Application Security
Encryption
Signature Matching
Web Threat Management
Antivirus
Behavioral Analytics
Device Management
Whitelisting / Blacklisting
Network Security
Access Control
Threat Response
VPN
Vulnerability Scanning
Analytics / Reporting
Compliance Reporting
Firewalls
Internet Usage Monitoring
Intrusion Detection System
Vulnerability Management
Network Scanning
Policy Management
Risk Management
Vulnerability Assessment
Asset Discovery
Asset Tagging
Patch Management
Prioritization
Web Scanning
