cloud hardening · 54 baseline controls

Cloud security
baseline generator

Pick your provider, workload profile, and compliance targets, and get a prioritized hardening checklist mapped to the CIS Benchmarks: identity first, then logging, network, workload, and data, laid out as a printable 30/60/90 day plan you can track.

A CIS-grounded starting baseline to adapt, not an audit or a substitute for provider documentation. Your selections and progress live only in your browser; nothing is uploaded.

Cloud providers

Workload profile

Compliance targets (optional)

Selecting a target pulls the controls that serve it earlier in the plan and shows which items map to it.