Chef Premium Content
CIS & DISA-STIG Curated Content for Automated IT Auditing and Remediation
Access Chef Premium Content for compliance scanning and remediation across a range of enterprise assets. Chef Premium Content comes as a part of Chef Compliance & Chef Desktop.
Chef Premium Content: The Ultimate CIS Compliance Audit and Content Remediation Jump Start
Chef Premium Content delivers Chef curated content for compliance audits, remediation and desktop configuration that is based on Center for Internet Security (CIS)) certified benchmarks or Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs). Chef continuously maintains and updates the Premium Content library. Whenever an updated or new profile is identified, Chef quickly certifies the content and makes it available for content subscribers.
Chef Premium Content for Operating Systems
Chef Premium Content offers traditional target scanning and remediation content that allows users to easily scan an extensive set of operating system through CIS Certified and DISA STIG’s referenced content.
| Infrastructure | Audit | Remediation |
|---|---|---|
| CIS AIX 5 - Level 1 & 2 | Yes | |
| CIS AIX 7 - Level 1 & 2 | Yes | |
| CIS AIX 7.1 - Level 1 & 2 | Yes | |
| CIS AIX 7.2 - Level 1 & 2 | Yes | |
| CIS Alma Linux 8 - Level 1 & 2 | Yes | Yes |
| CIS Amazon Linux 2 - Level 1 & 2 - Server | Yes | Yes |
| CIS Amazon Linux 2014 - Level 1 & 2 | Yes | |
| CIS Amazon Linux 2023 - Level 1 & 2 | Yes | |
| CIS CentOS Linux 6 - Level 1 & 2 - Server | Yes | |
| CIS CentOS Linux 7 - Level 1 & 2 - Server | Yes | Yes |
| CIS CentOS Linux 8 - Level 1 & 2 - Server | Yes | Yes |
| CIS SUSE Enterprise Linux 11 - Level 1 & 2 | Yes | |
| CIS SUSE Enterprise Linux 12 - Level 1 & 2 | Yes | |
| CIS SUSE Enterprise Linux 15 - Level 1 & 2 | Yes | Yes |
| CIS Debian Linux 9 - Level 1 & 2 - Server | Yes | Yes |
| CIS HP UX 11 - Level 1 & 2 | Yes | |
| CIS Oracle Linux 7 - Level 1 & 2 | Yes | |
| CIS Oracle Linux 8 - Level 1 & 2 | Yes | Yes |
| CIS Oracle Linux 9 - Level 1 & 2 | Yes | |
| CIS Oracle Solaris 10 - Level 1 & 2 | Yes | |
| CIS Oracle Solaris 11.1 - Level 1 & 2 | Yes | |
| CIS Oracle Solaris 11.2 - Level 1 & 2 | Yes | |
| CIS Oracle Solaris 11.4 - Level 1 & 2 | Yes | |
| CIS Red Hat Enterprise Linux 5 - Level 1 & 2 - Server | Yes | Yes |
| CIS Red Hat Enterprise Linux 6 - Level 1 & 2 – Server | Yes | Yes |
| CIS Red Hat Enterprise Linux 7 - Level 1 & 2 – Server | Yes | Yes |
| CIS Red Hat Enterprise Linux 8 - Level 1 & 2 – Server | Yes | Yes |
| CIS Red Hat Enterprise Linux 9 - Level 1 & 2 – Server | Yes | Yes |
| CIS Rocky Linux 8 - Level 1 & 2 | Yes | Yes |
| CIS Rocky Linux 9 - Level 1 & 2 | Yes | |
| CIS Ubuntu Linux 12.04 - Level 1 & 2 - Server | Yes | |
| CIS Ubuntu Linux 14.04 - Level 1 & 2 - Server | Yes | |
| CIS Ubuntu Linux 16.04 - Level 1 & 2 - Server | Yes | |
| CIS Ubuntu Linux 18.04 - Level 1 & 2 - Server | Yes | Yes |
| CIS Ubuntu Linux 20.04 - Level 1 & 2 - Server | Yes | Yes |
| CIS Ubuntu Linux 22.04 - Level 1 & 2 - Server | Yes | Yes |
| CIS Windows Server 2012 / R2 - Level 1 & 2 – Domain Controller | Yes | Yes |
| CIS Windows Server 2012 / R2 - Level 1 & 2 | Yes | Yes |
| CIS Windows Server 2012 - Level 1 & 2 – Domain Controller | Yes | Yes |
| CIS Windows Server 2012 - Level 1 & 2 | Yes | Yes |
| CIS Windows Server 2016 - Level 1 & 2 – Domain Controller | Yes | Yes |
| CIS Windows Server 2016 - Level 1 & 2 – Member Server | Yes | Yes |
| CIS Windows Server 2019 - Level 1 & 2 – Domain Controller | Yes | Yes |
| CIS Windows Server 2019 - Level 1 & 2 – Member Server | Yes | Yes |
| CIS Windows Server 2022 - Level 1 & 2 – Domain Controller | Yes | Yes |
| CIS Windows Server 2022 - Level 1 & 2 – Member Server | Yes | Yes |
| DISA STIG Red Hat Enterprise Linux 6 - Cat 1/2/3 | Yes | |
| DISA STIG Red Hat Enterprise Linux 7 - Cat 1/2/3 | Yes | Yes |
| DISA STIG Red Hat Enterprise Linux 8 - Cat 1/2/3 | Yes | Yes |
| DISA STIG Oracle Linux 8 CAT 1/2/3 | Yes | |
| DISA STIG Windows 10 - Cat 1/2/3 | Yes | Yes |
| DISA STIG Windows 11 - Cat 1/2/3 | Yes | |
| DISA STIG Windows Server 2012 / R2 – Member Server - Cat 1/2/3 | Yes | Yes |
| DISA STIG Windows Server 2016 - Cat 1/2/3 | Yes | Yes |
| DISA STIG Windows Server 2019 - Cat 1/2/3 | Yes | Yes |
| DISA STIG Windows Server 2022 - Cat 1/2/3 | Yes | |
| DISA STIG Ubuntu 20.04 | Yes | Yes |
| Applications | Audit | Remediate |
|---|---|---|
| CIS Apache HTTP 2.2 - Level 1 & 2 | Yes | Yes |
| CIS Apache HTTP 2.4 - Level 1 & 2 | Yes | Yes |
| CIS Apache Tomcat 5.5 - Level 1 & 2 | Yes | |
| CIS Apache Tomcat 8.0 - Level 1 & 2 | Yes | Yes |
| CIS Apache Tomcat 9.0 - Level 1 & 2 | Yes | Yes |
| CIS Cisco IOS 12 - Level 1 & 2 | Yes | |
| CIS Cisco IOS 15 - Level 1 & 2 | Yes | |
| CIS Microsoft Exchange 2016 - Level 1 & 2 | Yes | Yes |
| CIS Docker Community Edition 1.1.0 - Level 1 & 2 | Yes | Yes |
| CIS Microsoft Exchange 10 - Level 1 & 2 | Yes | |
| CIS Microsoft IIS 10 - Level 1 & 2 | Yes | Yes |
| CIS Microsoft Sharepoint 2016 - Level 1 & 2 | Yes | Yes |
| CIS Microsoft SQL Server 2016 - Level 1 & 2 | Yes | Yes |
| CIS Microsoft SQL Server 2017 - Level 1 & 2 | Yes | Yes |
| CIS Microsoft SQL Server 2019 - Level 1 & 2 | Yes | Yes |
| CIS MongoDB - Level 1 & 2 | Yes | Yes |
| CIS NGINX - Level 1 & 2 | Yes | Yes |
| CIS Oracle MySQL Community Server 5.7 - Level 1 & 2 | Yes | |
| CIS Oracle Database 12c - Level 1 & 2 | Yes | Yes |
| CIS Oracle Database 18c - Level 1 & 2 | Yes | Yes |
| CIS Oracle Database 19c - Level 1 & 2 | Yes | Yes |
| CIS PostgresSQL 10 - Level 1 & 2 | Yes | Yes |
| CIS PostgresSQL 11 - Level 1 & 2 | Yes | Yes |
| CIS VMWare ESXI 6.5 - Level 1 & 2 | Yes | Yes |
| CIS VMWare ESXI 6.7 - Level 1 & 2 | Yes | |
| CIS VMWare ESXI 7.0 - Level 1 & 2 | Yes | |
| CIS Microsoft 365 Foundations Benchmark - Level 1 & 2 | Yes | Yes |
| CIS Maria DB 10.6 Level 1 & 2 | Yes | |
| DISA STIG Marklogic 9 - Cat 1/2/3 | Yes | Yes |
Chef Premium Content for Cloud Environments
Chef Premium Content now offers new cloud target scanning that allows users to easily scan an extensive set of cloud resources across all major public cloud providers, as well as container and Kubernetes deployments.
| Cloud | Audit | Remediate |
|---|---|---|
| CIS Amazon Web Services Foundation Benchmark - Level 1 & 2 | Yes | |
| CIS Azure Foundations Benchmark - Level 1 & 2 | Yes | |
| CIS Docker Community Edition Benchmark - Level 1 & 2 | Yes | |
| CIS Google Cloud Platform Foundation Benchmark - Level 1 & 2 | Yes | |
| CIS Kubernetes Benchmark - Level 1 & 2 | Yes | |
| CIS Google Kuberenetes Engine | Yes | |
| CIS Redhat OpenShift Container Platform | Yes | |
| CIS Amazon Elastic Kubernetes Service (EKS) Benchmark - Level 1 & 2 | Yes |
Chef Premium Content for Chef Desktop
Chef Desktop leverages Chef Premium Content that includes configuration content to support basic configuration or testing configuration profiles. The desktop audit content has profiles for CIS benchmarks for various platforms, including Windows 10 and Linux among others. Chef also provides Chef Desktop users with remediation content allowing for automated remediation and continuous compliance maintenance.
| Desktop | Audit | Remediate |
|---|---|---|
| CIS Apple OS 10.5, 10.6, 10.8, 10.9, 10.10, 10.11, 10.12, 10.13 - Level 1 & 2 | Yes | |
| CIS Apple OS 10.14, 10.15 - Level 1 & 2 | Yes | Yes |
| CIS CentOS 6 - Level 1 & 2 | Yes | |
| CIS CentOS 7, 8 - Level 1 & 2 | Yes | Yes |
| CIS Debian Linux 9 - Level 1 & 2 | Yes | Yes |
| CIS Mac OS 11 - Level 1 & 2 | Yes | |
| CIS Red Hat Enterprise Linux 6 - Level 1 & 2 | Yes | |
| CIS Red Hat Enterprise Linux 7, 8 - Level 1 & 2 | Yes | Yes |
| CIS Red Hat Enterprise Linux 9 - Level 1 & 2 | Yes | Yes |
| CIS SUSE Linux Enterprise 12 - Level 1 & 2 | Yes | |
| CIS SUSE Linux Enterprise 15 - Level 1 & 2 | Yes | Yes |
| CIS Windows 7 - Level 1 & 2 | Yes | |
| CIS Windows 7 - Level 1 & 2 - BitLocker | Yes | |
| CIS Windows 8 - Level 1 | Yes | |
| CIS Windows 8 - Level 1 - BitLocker | Yes | |
| CIS Windows 8.1 - Level 1 & 2 | Yes | |
| CIS Windows 8.1 - Level 1 & 2 - BitLocker | Yes | |
| DISA STIG Windows 10 - Cat 1/2/3 | Yes | Yes |
| CIS Windows 10 Enterprise 1909 - Level 1 & 2 | Yes | Yes |
| CIS Windows 10 Enterprise 1909 - Level 1 & 2 - BitLocker | Yes | Yes |
| CIS Windows 10 Enterprise 2004 - Level 1 & 2 | Yes | Yes |
| CIS Windows 10 Enterprise 2004 - Level 1 & 2 - BitLocker | Yes | Yes |
| CIS Windows 10 Pro 1511 - Level 1 & 2 | Yes | |
| CIS Windows 10 20H2 - Level 1 & 2 BitLocker | Yes | Yes |
| CIS Windows 10 20H2 - Level 1 & 2 | Yes | Yes |
| CIS Windows 10 21H1 - Level 1 & 2 BitLocker | Yes | Yes |
| CIS Windows 10 21H1 - Level 1 & 2 | Yes | Yes |
| CIS WIndows 11 Enterprise - Level 1 & 2 Bitlocker | Yes | |
| CIS WIndows 11 Enterprise - Level 1 Bitlocker optional add | Yes | |
| CIS WIndows 11 Enterprise - Level 1 General Use | Yes | |
| CIS WIndows 11 Enterprise - Level 2 Sensitive Data Limited Functionality | Yes | |
| CIS Ubuntu 16 - Level 1 & 2 | Yes | |
| CIS Ubuntu 18 - Level 1 & 2 | Yes | Yes |
| CIS Ubuntu 20 - Level 1 & 2 | Yes | Yes |
| CIS Ubuntu 22 - Level 1 & 2 | Yes | Yes |
Chef Premium Content Delivered
Access Chef Premium Content with ease through our content delivery service, providing a growing library of curated, CIS-certified, up-to-date content for compliance scanning and remediation.
Chef Premium Content subscribers receive monthly email updates with access to configuration cookbooks, audit profiles, and remediation content.
Additional Chef Content
In addition to Premium Content, Chef provides content to customers and community members in several other ways. There is a set of standard audit content that is made available through Chef Automate, additional Cookbook content available in the Supermarket and application bundles available through Habitat Builder.
Chef Automate Content
Chef Automate provides an enterprise dashboard and analytics tools to enable cross team collaboration with actionable insights for configuration, compliance and an auditable history of changes to environments under management. Chef Automate, through integration to Chef Infra, Chef InSpec and Chef Habitat, provides a data warehouse to store Chef and community provided content.
Chef Automate is a core component in Chef Infrastructure Management, Chef Compliance, Chef App Delivery, Chef Desktop, and Chef Enterprise Automation Stack.
Learn more about Chef Automate
Chef Supermarket
Supermarket is Chef's open source community platform or clearing house where participants can find, share, explore and view Chef cookbooks, tools and plugins. It's the place where Chef community members share information about tools that can improve the Chef user ecosystem.
Go to Chef SupermarketChef Habitat Builder
Chef Habitat Builder acts as the core of Chef’s Application Delivery Enterprise hub. The Chef Habitat Builder content library contains hundreds of pre-built application delivery packages and core dependency plans.
Go to Habitat BuilderReady to get started with Chef Premium Content?
Chef Premium Content is available as a part of Chef Compliance or Chef Desktop
