debian-cis is a modular set of CIS and PCI-DSS hardening scripts that audit and automatically remediate security settings on Debian servers.