premium-content
Chef Premium Content

CIS & DISA-STIG Curated Content for Automated IT Auditing and Remediation

Access Chef Premium Content for compliance scanning and remediation across a range of enterprise assets. Chef Premium Content comes as a part of Chef Compliance & Chef Desktop.

Chef Premium Content: The Ultimate CIS Compliance Audit and Content Remediation Jump Start

Chef Premium Content delivers Chef curated content for compliance audits, remediation and desktop configuration that is based on Center for Internet Security (CIS)) certified benchmarks or Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs). Chef continuously maintains and updates the Premium Content library. Whenever an updated or new profile is identified, Chef quickly certifies the content and makes it available for content subscribers.

Learn about Chef Compliance

Chef Premium Content for Operating Systems

Chef Premium Content offers traditional target scanning and remediation content that allows users to easily scan an extensive set of operating system through CIS Certified and DISA STIG’s referenced content.

InfrastructureAuditRemediation
CIS AIX 5 - Level 1 & 2Yes 
CIS AIX 7 - Level 1 & 2Yes 
CIS AIX 7.1 - Level 1 & 2Yes 
CIS AIX 7.2 - Level 1 & 2Yes 
CIS Alma Linux 8 - Level 1 & 2YesYes
CIS Amazon Linux 2 - Level 1 & 2 - ServerYesYes
CIS Amazon Linux 2014 - Level 1 & 2Yes 
CIS Amazon Linux 2023 - Level 1 & 2Yes 
CIS CentOS Linux 6 - Level 1 & 2 - ServerYes 
CIS CentOS Linux 7 - Level 1 & 2 - Server YesYes
CIS CentOS Linux 8 - Level 1 & 2 - ServerYesYes
CIS SUSE Enterprise Linux 11 - Level 1 & 2Yes 
CIS SUSE Enterprise Linux 12 - Level 1 & 2Yes 
CIS SUSE Enterprise Linux 15 - Level 1 & 2YesYes
CIS Debian Linux 9 - Level 1 & 2 - Server YesYes
CIS HP UX 11 - Level 1 & 2Yes 
CIS Oracle Linux 7 - Level 1 & 2Yes 
CIS Oracle Linux 8 - Level 1 & 2YesYes
CIS Oracle Linux 9 - Level 1 & 2Yes 
CIS Oracle Solaris 10 - Level 1 & 2Yes 
CIS Oracle Solaris 11.1 - Level 1 & 2Yes 
CIS Oracle Solaris 11.2 - Level 1 & 2Yes 
CIS Oracle Solaris 11.4 - Level 1 & 2Yes 
CIS Red Hat Enterprise Linux 5 - Level 1 & 2 - ServerYesYes
CIS Red Hat Enterprise Linux 6 - Level 1 & 2 – Server YesYes
CIS Red Hat Enterprise Linux 7 - Level 1 & 2 – Server YesYes
CIS Red Hat Enterprise Linux 8 - Level 1 & 2 – Server YesYes
CIS Red Hat Enterprise Linux 9 - Level 1 & 2 – ServerYesYes
CIS Rocky Linux 8 - Level 1 & 2YesYes
CIS Rocky Linux 9 - Level 1 & 2Yes 
CIS Ubuntu Linux 12.04 - Level 1 & 2 - ServerYes 
CIS Ubuntu Linux 14.04 - Level 1 & 2 - ServerYes 
CIS Ubuntu Linux 16.04 - Level 1 & 2 - ServerYes 
CIS Ubuntu Linux 18.04 - Level 1 & 2 - ServerYesYes
CIS Ubuntu Linux 20.04 - Level 1 & 2 - ServerYesYes
CIS Ubuntu Linux 22.04 - Level 1 & 2 - ServerYesYes
CIS Windows Server 2012 / R2 - Level 1 & 2 – Domain ControllerYesYes
CIS Windows Server 2012 / R2 - Level 1 & 2 YesYes
CIS Windows Server 2012 - Level 1 & 2 – Domain ControllerYesYes
CIS Windows Server 2012 - Level 1 & 2 YesYes
CIS Windows Server 2016 - Level 1 & 2 – Domain ControllerYesYes
CIS Windows Server 2016 - Level 1 & 2 – Member ServerYesYes
CIS Windows Server 2019 - Level 1 & 2 – Domain ControllerYesYes
CIS Windows Server 2019 - Level 1 & 2 – Member ServerYesYes
CIS Windows Server 2022 - Level 1 & 2 – Domain ControllerYesYes
CIS Windows Server 2022 - Level 1 & 2 – Member ServerYesYes
DISA STIG Red Hat Enterprise Linux 6 - Cat 1/2/3Yes 
DISA STIG Red Hat Enterprise Linux 7 - Cat 1/2/3YesYes
DISA STIG Red Hat Enterprise Linux 8 - Cat 1/2/3YesYes
DISA STIG Oracle Linux 8 CAT 1/2/3Yes 
DISA STIG Windows 10 - Cat 1/2/3YesYes
DISA STIG Windows 11 - Cat 1/2/3Yes 
DISA STIG Windows Server 2012 / R2 – Member Server - Cat 1/2/3YesYes
DISA STIG Windows Server 2016 - Cat 1/2/3YesYes
DISA STIG Windows Server 2019 - Cat 1/2/3YesYes
DISA STIG Windows Server 2022 - Cat 1/2/3Yes 
DISA STIG Ubuntu 20.04YesYes
ApplicationsAuditRemediate
CIS Apache HTTP 2.2 - Level 1 & 2YesYes
CIS Apache HTTP 2.4 - Level 1 & 2YesYes
CIS Apache Tomcat 5.5 - Level 1 & 2Yes 
CIS Apache Tomcat 8.0 - Level 1 & 2YesYes
CIS Apache Tomcat 9.0 - Level 1 & 2YesYes
CIS Cisco IOS 12 - Level 1 & 2Yes 
CIS Cisco IOS 15 - Level 1 & 2Yes 
CIS Microsoft Exchange 2016 - Level 1 & 2YesYes
CIS Docker Community Edition 1.1.0 - Level 1 & 2YesYes
CIS Microsoft Exchange 10 - Level 1 & 2Yes 
CIS Microsoft IIS 10 - Level 1 & 2 YesYes
CIS Microsoft Sharepoint 2016 - Level 1 & 2YesYes
CIS Microsoft SQL Server 2016 - Level 1 & 2YesYes
CIS Microsoft SQL Server 2017 - Level 1 & 2YesYes
CIS Microsoft SQL Server 2019 - Level 1 & 2YesYes
CIS MongoDB - Level 1 & 2YesYes
CIS NGINX - Level 1 & 2YesYes
CIS Oracle MySQL Community Server 5.7 - Level 1 & 2Yes 
CIS Oracle Database 12c - Level 1 & 2YesYes
CIS Oracle Database 18c - Level 1 & 2YesYes
CIS Oracle Database 19c - Level 1 & 2YesYes
CIS PostgresSQL 10 - Level 1 & 2YesYes
CIS PostgresSQL 11 - Level 1 & 2YesYes
CIS VMWare ESXI 6.5 - Level 1 & 2YesYes
CIS VMWare ESXI 6.7 - Level 1 & 2Yes 
CIS VMWare ESXI 7.0 - Level 1 & 2Yes 
CIS Microsoft 365 Foundations Benchmark - Level 1 & 2YesYes
CIS Maria DB 10.6 Level 1 & 2Yes 
DISA STIG Marklogic 9 - Cat 1/2/3YesYes

Chef Premium Content for Cloud Environments

Chef Premium Content now offers new cloud target scanning that allows users to easily scan an extensive set of cloud resources across all major public cloud providers, as well as container and Kubernetes deployments.

CloudAuditRemediate
CIS Amazon Web Services Foundation Benchmark - Level 1 & 2Yes 
CIS Azure Foundations Benchmark - Level 1 & 2Yes 
CIS Docker Community Edition Benchmark - Level 1 & 2Yes 
CIS Google Cloud Platform Foundation Benchmark - Level 1 & 2Yes 
CIS Kubernetes Benchmark - Level 1 & 2Yes 
CIS Google Kuberenetes EngineYes 
CIS Redhat OpenShift Container PlatformYes 
CIS Amazon Elastic Kubernetes Service (EKS) Benchmark - Level 1 & 2Yes 

Chef Premium Content for Chef Desktop

Chef Desktop leverages Chef Premium Content that includes configuration content to support basic configuration or testing configuration profiles. The desktop audit content has profiles for CIS benchmarks for various platforms, including Windows 10 and Linux among others. Chef also provides Chef Desktop users with remediation content allowing for automated remediation and continuous compliance maintenance.

desktop-code
DesktopAuditRemediate
CIS Apple OS 10.5, 10.6, 10.8, 10.9, 10.10, 10.11, 10.12, 10.13 - Level 1 & 2Yes 
CIS Apple OS 10.14, 10.15 - Level 1 & 2YesYes
CIS CentOS 6  - Level 1 & 2Yes 
CIS CentOS 7, 8  - Level 1 & 2YesYes
CIS Debian Linux 9 - Level 1 & 2YesYes
CIS Mac OS 11 - Level 1 & 2Yes 
CIS Red Hat Enterprise Linux 6 - Level 1 & 2Yes 
CIS Red Hat Enterprise Linux 7, 8 - Level 1 & 2YesYes
CIS Red Hat Enterprise Linux 9 - Level 1 & 2YesYes
CIS SUSE Linux Enterprise 12 - Level 1 & 2Yes 
CIS SUSE Linux Enterprise 15 - Level 1 & 2YesYes
CIS Windows 7 - Level 1 & 2Yes 
CIS Windows 7 - Level 1 & 2 - BitLockerYes 
CIS Windows 8  - Level 1 Yes 
CIS Windows 8 - Level 1 - BitLockerYes 
CIS Windows 8.1 - Level 1 & 2Yes 
CIS Windows 8.1 - Level 1 & 2 - BitLockerYes 
DISA STIG Windows 10 - Cat 1/2/3YesYes
CIS Windows 10 Enterprise 1909 - Level 1 & 2YesYes
CIS Windows 10 Enterprise 1909 - Level 1 & 2 - BitLockerYesYes
CIS Windows 10 Enterprise 2004 - Level 1 & 2YesYes
CIS Windows 10 Enterprise 2004 - Level 1 & 2 - BitLocker YesYes
CIS Windows 10 Pro 1511 - Level 1 & 2Yes 
CIS Windows 10 20H2 - Level 1 & 2 BitLockerYesYes
CIS Windows 10 20H2 - Level 1 & 2YesYes
CIS Windows 10 21H1 - Level 1 & 2 BitLockerYesYes
CIS Windows 10 21H1 - Level 1 & 2YesYes
CIS WIndows 11 Enterprise - Level 1 & 2 BitlockerYes 
CIS WIndows 11 Enterprise - Level 1 Bitlocker optional addYes 
CIS WIndows 11 Enterprise - Level 1 General UseYes 
CIS WIndows 11 Enterprise - Level 2 Sensitive Data Limited FunctionalityYes 
CIS Ubuntu 16 - Level 1 & 2Yes 
CIS Ubuntu 18 - Level 1 & 2YesYes
CIS Ubuntu 20 - Level 1 & 2YesYes
CIS Ubuntu 22 - Level 1 & 2YesYes
Learn about Chef Desktop

Chef Premium Content Delivered

Access Chef Premium Content with ease through our content delivery service, providing a growing library of curated, CIS-certified, up-to-date content for compliance scanning and remediation.

Chef Premium Content subscribers receive monthly email updates with access to configuration cookbooks, audit profiles, and remediation content.

Additional Chef Content

In addition to Premium Content, Chef provides content to customers and community members in several other ways. There is a set of standard audit content that is made available through Chef Automate, additional Cookbook content available in the Supermarket and application bundles available through Habitat Builder.

Chef Automate Content

Chef Automate provides an enterprise dashboard and analytics tools to enable cross team collaboration with actionable insights for configuration, compliance and an auditable history of changes to environments under management. Chef Automate, through integration to Chef Infra, Chef InSpec and Chef Habitat, provides a data warehouse to store Chef and community provided content.

Chef Automate is a core component in Chef Infrastructure Management, Chef Compliance, Chef App Delivery, Chef Desktop, and Chef Enterprise Automation Stack.

Learn more about Chef Automate
chef-automate-content

Chef Supermarket

Supermarket is Chef's open source community platform or clearing house where participants can find, share, explore and view Chef cookbooks, tools and plugins. It's the place where Chef community members share information about tools that can improve the Chef user ecosystem.

Go to Chef Supermarket

Chef Habitat Builder

Chef Habitat Builder acts as the core of Chef’s Application Delivery Enterprise hub. The Chef Habitat Builder content library contains hundreds of pre-built application delivery packages and core dependency plans.

Go to Habitat Builder

Ready to get started with Chef Premium Content?

Chef Premium Content is available as a part of Chef Compliance or Chef Desktop

Chef Compliance

Product

Chef Compliance

Learn More
Chef Desktop

Product

Chef Desktop

Learn More