Skip to main content

Update cnspec

cnspec is a versioned binary. To identify the currently installed version of cnspec, run:

cnspec version

To learn about cnspec provider versioning, read Manage cnspec Providers.

How cnspec versioning works

Mondoo's versioning policy is based on the semantic versioning standard. For example, in version 10.8.4, 10 is the major version, 8 is the minor version, and 4 is the patch. When we release a new version, we increment one of these three version components depending on the type of changes we introduce.

Breaking changes policy

Major version releases of cnspec contain soft-breaking changes. These may require you to update your policies, or automation scripts in order to avoid disruption, but you have a long time to make those updates. We provide advanced warning before we make these changes, and they don't become hard-breaking changes until the next major release.

Update cnspec

To update cnspec to the latest version, you can use your preferred package manager, such as Homebrew or Chocolatey, or simply re-run the installation script.


Integrations that run on Mondoo Platform as well as the Kubernetes operator and the AWS Lambda-based integration, automatically update to the latest version; there's no need to manually update.

Update cnspec on Linux or macOS

bash -c "$(curl -sSL"

Update cnspec on Windows

Set-ExecutionPolicy Unrestricted -Scope Process -Force;
[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072;
iex ((New-Object System.Net.WebClient).DownloadString(''));
Install-Mondoo -Product cnspec;

Learn more

Can't find what you need? Join our community Slack channel to chat with us and other Mondoo users.