Audience
Insititutions requiring client-less technology that requires no software agents
About ConfigOS
ConfigOS is currently implemented in classified and unclassified environments, tactical and weapon system programs, disconnected labs, and the commercial cloud. ConfigOS is client-less technology, requiring no software agents. ConfigOS scans endpoint systems and remediates hundreds of STIG controls in under 90 seconds. Automated remediation rollback as well as comprehensive compliance reporting and STIG Viewer Checklist output are provided. ConfigOS was designed to harden every CAT 1/2/3 STIG control around an application baseline in about 60 minutes - typically eliminating weeks or months from the RMF accreditation timeline. ConfigOS addresses Microsoft Windows workstation and server operating systems, SQL Server, IIS, IE, Chrome, and all of the Microsoft Office components. The same instance of ConfigOS addresses Red Hat 5/6/7, SUSE, Ubuntu, and Oracle Linux. ConfigOS content includes over 10,000 STIG and CIS controls. New functionality in Command Center includes a patent-pend
Other Popular Alternatives & Related Software
SaltStack
SaltStack is an intelligent IT automation platform that can manage, secure, and optimize any infrastructure—on-prem, in the cloud, or at the edge. It’s built on a unique and powerful event-driven automation engine that detects events in any system and reacts intelligently to them, making it an extremely effective solution for managing large, complex environments.
With the newly launched SecOps offering, SaltStack can detect security vulnerabilities and non-compliant, mis-configured systems. As soon as an issue is detected, this powerful automation helps you and your team remediate it, keeping your infrastructure securely configured, compliant, and up-to-date.
The SecOps suite includes both Comply and Protect. Comply scans and remediates against CIS, DISA-STIG, NIST, PCI, HIPAA compliance standards. And Protect scans for vulnerabilities and patches and updates your operating systems.
Learn more
Runecast
Runecast is an enterprise CNAPP platform that saves your Security and Operations teams time and resources by enabling a proactive approach to ITOM, CSPM, and compliance. It automates vulnerability assessment, configuration drift management and continuous compliance – for VMware, Cloud and Containers.
By proactively using our agentless scanning in real-time admins discover potential risks and remediation solutions before any issues can develop into a major outage.
It provides continuous audits against vendor best practices, common security standards, and frameworks such as BSI IT-Grundschutz, CIS, Cyber Essentials, DISA STIG, DORA, Essential 8, GDPR, HIPAA, ISO 27001, KVKK, NIST, PCI DSS, TISAX, VMware Security Hardening Guidelines, and the CISA KEVs catalog.
Detect and assess risks and be fully compliant across your hybrid cloud in minutes.
Runecast has been recognized with Frost & Sullivan's 2023 European New Product Innovation Award in the CNAPP industry.
Learn more
AWS Config
AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. With Config, you can review changes in configurations and relationships between AWS resources, dive into detailed resource configuration histories, and determine your overall compliance against the configurations specified in your internal guidelines. This enables you to simplify compliance auditing, security analysis, change management, and operational troubleshooting. AWS Config is designed to be your primary tool to perform configuration audit and compliance verification of both your AWS and third-party resources. You can publish the configuration of third-party resources such as GitHub repositories, Microsoft Active Directory resources, or any on-premises server into AWS.
Learn more
ConfigCobra
ConfigCobra is a CIS-certified SaaS that automates security compliance assessments for Microsoft 365 using the CIS Microsoft 365 Foundations Benchmark. It scans your tenant against CIS controls, detects configuration drift, and provides clear, actionable remediation guidance for every finding. Customers can run on-demand assessments or schedule recurring scans for continuous compliance monitoring, and generate CIS-certified, audit-ready PDF reports with evidence. ConfigCobra integrates with Microsoft Entra ID for secure access and uses Microsoft APIs to evaluate tenant configuration without making changes.
Learn more
Integrations
Company Information
SteelCloud
Founded: 1987
United States
www.steelcloud.com
Videos and Screen Captures
Other Useful Business Software
$300 Free Credits to Build on Google Cloud
Put your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
Product Details
Platforms Supported
Cloud
Windows
Training
Documentation
Live Online
Webinars
In Person
Support
Phone Support
Online
ConfigOS Frequently Asked Questions
ConfigOS Product Features
Compliance
Audit Management
Supported
Compliance Tracking
Supported
Controls Testing
Supported
Risk Management
Supported
Archiving & Retention
Not Supported
Artificial Intelligence (AI)
Not Supported
Environmental Compliance
Not Supported
FDA Compliance
Not Supported
HIPAA Compliance
Not Supported
ISO Compliance
Not Supported
Incident Management
Not Supported
OSHA Compliance
Not Supported
Sarbanes-Oxley Compliance
Not Supported
Surveys & Feedback
Not Supported
Version Control
Not Supported
Workflow / Process Automation
Not Supported
Cybersecurity
Endpoint Management
Supported
Incident Management
Supported
Vulnerability Scanning
Supported
AI / Machine Learning
Not Supported
Behavioral Analytics
Not Supported
IOC Verification
Not Supported
Tokenization
Not Supported
Whitelisting / Blacklisting
Not Supported
Endpoint Protection
Activity Log
Supported
Application Security
Supported
Encryption
Supported
Signature Matching
Supported
Web Threat Management
Supported
Antivirus
Not Supported
Behavioral Analytics
Not Supported
Device Management
Not Supported
Whitelisting / Blacklisting
Not Supported
Network Security
Access Control
Supported
Threat Response
Supported
VPN
Supported
Vulnerability Scanning
Supported
Analytics / Reporting
Not Supported
Compliance Reporting
Not Supported
Firewalls
Not Supported
Internet Usage Monitoring
Not Supported
Intrusion Detection System
Not Supported
Vulnerability Management
Network Scanning
Supported
Policy Management
Supported
Risk Management
Supported
Vulnerability Assessment
Supported
Asset Discovery
Not Supported
Asset Tagging
Not Supported
Patch Management
Not Supported
Prioritization
Not Supported
Web Scanning
Not Supported
