ConfigOS by SteelCloud is a patented compliance software suite that enables quick establishment of a STIG (Security Technical Implementation Guide) and CIS (Center for Information Security) compliant environment. It provides a complete solution for auditing, scanning, enterprise-wide remediation, and compliance reporting, addressing RMF, NIST SP 800-171, and production STIG compliance requirements. ConfigOS incorporates policy content and remediation automation for Windows Workstation, Windows Server, and Linux. It is client-less technology, requiring no software agents, and addresses Microsoft Windows operating systems, SQL Server, IIS, IE, Chrome, and Microsoft Office components. The same instance of ConfigOS addresses Cisco network devices, Apache web server, Oracle, Red Hat Enterprise Linux 5 (RHEL 5+ 6, 7, 8), SUSE, CentOS, and Ubuntu. ConfigOS removes 90% of the effort to harden systems. It creates a secure baseline implementation of any given policy for your operational or application environment. ConfigOS can scan 5,000-15,000 endpoints per hour and remediate 3,000-5,000 endpoints per hour. It simplifies compliance reporting with organized formats and complete STIG Viewer checklist integration, including automatic entry of full finding details and waiver descriptions. ConfigOS allows users to create group policies for DISA quarterly updates without needing SMEs. It offers checklist reporting to STIG Viewer for appending and remediating to produce one data file. ConfigOS Command Center manages endpoints efficiently, allowing for quick fixes, evaluations, rollbacks, and reporting from a single screen. Initial hardening and baseline creation can be done in under 60 minutes. ConfigOS utilizes Policy 360 software for high-performance scanning and automated STIG/CIS remediation of Windows and Linux systems. ConfigOS DashView automates compliance monitoring using Splunk’s “Big Data” platforms, providing near real-time awareness. ConfigOS is implemented in classified and unclassified environments, tactical programs, disconnected labs, and the commercial cloud. It supports Zero Trust by validating both identity and configuration while automating cybersecurity processes.
