TuxCare Contributes Free AlmaLinux OS 9 STIG Automation to Open Source Community
Newly available automation enables AlmaLinux users to assess security compliance. PALO ALTO, CA, UNITED STATES, October
Press Release Disclaimer: This is a press release distributed through the XPR Media network. It has not been independently verified by our newsroom.
Newly available automation enables AlmaLinux users to assess security compliance.
PALO ALTO, CA, UNITED STATES, October 26, 2026 /EINPresswire.com/ — TuxCare, a global innovator in cybersecurity, today announced that it has contributed free security compliance automation for AlmaLinux OS 9 to the open source ComplianceAsCode project, making it easier for organizations to evaluate their systems against the Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG). The contribution is available here.
The contribution provides machine-readable automation for the existing “Cloud Linux AlmaLinux OS 9 STIG,” which TuxCare maintains with DISA. The new automation is freely available to the entire AlmaLinux community.
ComplianceAsCode turns security standards like the STIG and CIS benchmarks into automated checks and fixes. OpenSCAP, a free scanning tool, runs those checks on a system and reports which requirements it meets. Anyone can use or contribute to ComplianceAsCode, and Red Hat Enterprise Linux and other Linux distributions include it as the SCAP-Security-Guide (SSG) package. The project already covers the STIG for Red Hat Enterprise Linux 9, and with this contribution it now covers AlmaLinux OS 9 as well.
“Security compliance should not depend on an organization’s ability to invest in expensive tools or devote countless hours to manual assessments,” said Igor Seletskiy, CEO of TuxCare. “By contributing this automation to the open source community, we’re making it easier for AlmaLinux users to understand their security posture, identify gaps and prepare for demanding compliance requirements.”
The contribution makes STIG-based security assessments more accessible and practical for AlmaLinux users, particularly those operating in defense, federal government, and other highly regulated environments. Rather than manually reviewing hundreds of individual security requirements, administrators can use OpenSCAP with the new automation to identify which requirements their systems satisfy and which require additional attention. Where a scan identifies a failing policy, administrators can remediate using the included Bash or Ansible snippets.
The new automation supports the latest version V1R8 of the DISA STIG and provides automated checks for 434 of the 439 security requirements. The automation itself is completely free and can be used to scan and harden any AlmaLinux OS 9 system without licensing fees. Organizations seeking to satisfy the complete STIG, however, must also meet its specific requirements for TuxCare’s Extended Security Updates (ESU) and FIPS 140-3 validated packages, available for supported AlmaLinux 9.2 and 9.6 environments, with FIPS work for AlmaLinux 9.10 starting in November 2026.
For organizations requiring more frequent updates to security hardening automation, TuxCare also offers Security Hardening Support, providing updated Ansible scripts and kickstarts along with direct access to TuxCare engineers.
For more information about TuxCare’s FIPS solutions for AlmaLinux, visit:
https://tuxcare.com/fips-for-almalinux/
To learn more about the Cloud Linux AlmaLinux OS 9 STIG, visit: https://ncp.nist.gov/checklist/1264
About TuxCare
TuxCare is on a mission to reduce the risk of cyber exploitation while making it easier for enterprises to get the most from their open-source technologies. Through its automated rebootless vulnerability patching solutions, end-of-life security offerings, and enterprise-grade support for AlmaLinux, TuxCare empowers thousands of organizations to protect themselves while leveraging the most advanced enterprise security solutions on the market today. The world’s largest enterprises, government agencies, service providers, universities, and research institutions are protected by TuxCare on over one million workloads and growing. For more information, go to https://tuxcare.com.
Artem Karasev
TuxCare
marketing@tuxcare.com
Legal Disclaimer:
EIN Presswire provides this news content “as is” without warranty of any kind. We do not accept any responsibility or liability
for the accuracy, content, images, videos, licenses, completeness, legality, or reliability of the information contained in this
article. If you have any complaints or copyright issues related to this article, kindly contact the author above.
Media gallery
