Skip to main content

About Mondoo and cnspec

cnspec is a core component of Mondoo Platform. Think of it as both the CLI and the engine for Mondoo. This cross-platform binary evaluates systems and exposes misconfigurations and vulnerabilities that put your organization at risk. It's what enables Mondoo to assess and secure the IT infrastructure that powers your critical business systems.

You can invoke cnspec directly from the command line to assess the local host, perform agentless scans of remote assets, or remotely query IT infrastructure using MQL. It can also run automatically as a background service.

When combined with Mondoo Platform's management capabilities, cnspec can continuously assess your business-critical systems according to the policies you apply. Mondoo reports any deviation from those policies so that you can take immediate action.

$ cnspec scan

β†’ no provider specified, defaulting to local.
Use --help for a list of available providers.
β†’ loaded configuration from /Users/tsmith/.config/mondoo/mondoo.yml using source default
β†’ using service account credentials
β†’ discover related assets for 1 asset(s)
β†’ resolved assets resolved-assets=1

β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆ 100% MBP.localdomain score: B

Asset: MBP.localdomain
===========================
Data queries:
platform.release: "13.2"
platform.title: "macOS, bare metal"
platform.arch: "arm64"
os.uptime: 7 days 2 hours 14 minutes 3 seconds
packages.list.length: 360
mondoo.version: "7.14.0"
os.hostname: "MBP.localdomain"

Controls:
! Error: Disable Remote Login
βœ“ Pass: Ensure http server is not running
βœ“ Pass: Ensure nfs server is not running.
βœ“ Pass: Disable Bluetooth Sharing
βœ• Fail: Password Age
βœ“ Pass: Retain install.log for 365 or more days with no maximum size
βœ“ Pass: Enable Gatekeeper
βœ“ Pass: Control access to audit records
βœ“ Pass: Password History
βœ“ Pass: Enable "Show Wi-Fi status in menu bar"
βœ• Fail: Ensure AirDrop Is Disabled
βœ“ Pass: Disable DVD or CD Sharing

Scanned 1 assets

macOS
B MBP.localdomain

For detailed output, run this scan with "-o full".

Learn more​