CISGuard is a continuous compliance automation platform built by GR IT Services. It scans infrastructure against 22 CIS benchmarks covering 3,910+ security controls, with real-time drift detection and multi-framework mapping for NIST 800-53, ISO 27001, and SOC 2. It deploys fully on-premises with air-gapped support and requires no SaaS dependency.

What is CIS benchmark compliance automation?

CIS benchmark compliance automation uses software agents to continuously scan your infrastructure against Center for Internet Security (CIS) benchmarks. Instead of manual audits, CISGuard automatically evaluates 3,910+ security controls across Windows, Linux, cloud, and container platforms, providing real-time compliance posture with drift detection.

What is drift detection in compliance?

Drift detection is the process of identifying configuration changes that cause an endpoint to deviate from its hardened baseline. CISGuard compares every scan against the previous result and alerts your team within minutes when a configuration regresses, such as a Group Policy change, a firewall rule modification, or an audit policy being disabled.

How does continuous compliance monitoring work?

Continuous compliance monitoring replaces point-in-time audits with automated, scheduled scans. CISGuard agents detect your platform, run the matching CIS benchmark, and stream results to a real-time dashboard. Every scan is compared against the previous baseline to detect regressions, improvements, and new controls.

Can CISGuard be deployed on-premises and air-gapped?

Yes. CISGuard is designed for on-premises deployment. All scan data stays within your network perimeter. It supports fully air-gapped environments for classified and regulated industries, with no SaaS dependency, no cloud data transfer, and no internet connectivity required during operation.

What compliance frameworks does CISGuard support?

CISGuard maps scan results across four frameworks: CIS Benchmarks v8 (3,910+ controls), NIST SP 800-53 Rev. 5 (50 mapped controls across 20 control families), ISO/IEC 27001:2022 (36 mapped controls), and SOC 2 Type II (26 mapped criteria). A single scan satisfies multiple compliance requirements simultaneously.

What platforms and operating systems does CISGuard support?

CISGuard supports 22 security benchmarks across: Windows (10, 11, Server 2022), Linux (Ubuntu 24.04, RHEL 9, Debian 12, Azure Linux), cloud (Microsoft Azure, AWS, Microsoft 365), containers (Kubernetes, Docker, AKS, EKS, OpenShift), browsers (Chrome, Edge, Firefox), and server applications (SQL Server 2022, IIS 10).

How quickly can CISGuard be deployed?

CISGuard can be deployed and scanning your environment in under one hour for standard deployments. GR IT Services provides fully managed onboarding, including server setup, agent deployment, SSO integration, and SIEM configuration. Enterprise deployments with thousands of endpoints typically complete within 1-2 weeks in phased rollouts.

How is CISGuard different from Tenable, Qualys, or Rapid7?

Unlike Tenable Nessus, Qualys, and Rapid7, CISGuard is purpose-built for CIS benchmark compliance rather than vulnerability scanning. Key differentiators include: fully on-premises and air-gapped deployment (no SaaS dependency), continuous drift detection between scans, multi-framework mapping (CIS + NIST + ISO + SOC 2 from a single scan), and Kubernetes/Docker container benchmark support. See the full feature comparison at cisguard.ae/compare.

How much does CISGuard cost?

CISGuard offers three plans: Starter (up to 50 endpoints), Professional (up to 500 endpoints, most popular), and Enterprise (unlimited endpoints). Pricing is per-deployment with no per-endpoint fees or hidden modules. All plans include on-premises deployment, managed onboarding, and data sovereignty. Contact sales@cisguard.ae for a quote.

What is multi-framework compliance mapping?

Multi-framework compliance mapping is the ability to run a single CIS benchmark scan and automatically map the results to multiple regulatory frameworks (NIST 800-53, ISO 27001, SOC 2) simultaneously. This eliminates the need to run separate assessments for each framework and reduces duplicate evidence collection by up to 3x.

Does CISGuard support HIPAA, GDPR, or regional regulations?

CISGuard's CIS benchmark scans and NIST 800-53 mapping directly support the technical safeguard requirements of HIPAA, GDPR, UAE PDPL, APRA CPS 234 (Australia), ENS (Spain), TISAX (Germany automotive), and other regulations that reference CIS or NIST controls. Organizations in healthcare, finance, government, and telecommunications across the UAE, USA, Germany, Australia, India, and Spain use CISGuard for regulatory compliance.

Benchmark Catalog

22 CIS Benchmarks, 3,928 Controls

Every benchmark maintained by the Center for Internet Security, covering endpoints, cloud, containers, browsers, and databases.

Endpoint

7 benchmarks

Benchmark	Version	Controls	Scan Type	Tier
CIS Windows 11 Enterprise Benchmark	v5.0.0	555	Agent	All
CIS Intune Windows 11 Benchmark	v4.0.0	457	Agent	All
CIS Windows Server 2022 Benchmark	v2.0.0	535	Agent	All
CIS Ubuntu 24.04 LTS Benchmark	v1.0.0	311	Agent	All
CIS RHEL 9 Benchmark	v2.0.0	296	Agent	All
CIS AKS Azure Linux 2 Benchmark	v1.1.0	135	Agent	All
CIS AKS Azure Linux 3 Benchmark	v1.0.0	141	Agent	All

Cloud

4 benchmarks

Benchmark	Version	Controls	Scan Type	Tier
CIS Azure Foundations Benchmark	v5.0.0	155	Agentless	Pro+
CIS Microsoft 365 Benchmark	v6.0.0	140	Agentless	Pro+
CIS AWS Foundations Benchmark	v4.0.0	86	Agentless	Pro+
CIS Azure Compute Benchmark	v2.0.0	99	Agentless	Pro+

Container & Orchestration

5 benchmarks

Benchmark	Version	Controls	Scan Type	Tier
CIS Kubernetes Benchmark	v1.12.0	127	Agentless	Pro+
CIS Docker Benchmark	v1.8.0	118	Agent	All
CIS Azure AKS Benchmark	v1.8.0	49	Agentless	Pro+
CIS Amazon EKS Benchmark	v1.8.0	48	Agentless	Pro+
CIS Red Hat OpenShift Benchmark	v1.9.0	111	Agentless	Pro+

Browser

4 benchmarks

Benchmark	Version	Controls	Scan Type	Tier
CIS Google Chrome Benchmark	v3.0.0	117	Agent	All
CIS Microsoft Edge Benchmark	v4.0.0	128	Agent	All
CIS Firefox ESR Benchmark	v1.0.0	62	Agent	All
CIS Internet Explorer 11 Benchmark	v1.0.0	156	Agent	All

Database & Web Server

2 benchmarks

Benchmark	Version	Controls	Scan Type	Tier
CIS SQL Server 2022 Benchmark	v1.2.1	47	Agent	All
CIS IIS 10 Benchmark	v1.2.1	55	Agent	All

Need a Benchmark We Don't Cover Yet?

We continuously add new benchmarks. Contact us to discuss your specific compliance requirements.

Request Demo