Mondoo

Summary cnquery is an open-source tool from Mondoo for asking questions about the current state of your infrastructure. Using the Mondoo Query Language (MQL),

Summary cnspec is an open-source security and compliance scanner from Mondoo. It evaluates infrastructure against policies expressed as code—security

A lot has happened in the eight months since we covered Mondoo's March 2025 release. If you're already using the platform, you've probably noticed some big

Mondoo bills itself as a comprehensive exposure management platform – think a single pane for all your security needs, on-prem and in the cloud. In practice,

In previous posts we have already shown multiple ways to use HashiCorp Packer to build Golden Images. In this post we will show how to automate the process with

In the rapidly evolving world of software development, securing and managing the integrity of codebases is paramount, particularly for organizations subject to

In today's fast-paced digital landscape, efficient case management is crucial for organizations to stay on top of security and compliance issues. Mondoo, a

In the previous posts of this blog series, we introduced the Mondoo platform, its Terraform provider resources, data sources, and imports, exploring how they

Introduction In today's fast-paced digital landscape, ensuring compliance with various frameworks is crucial for companies to maintain the security and

In the previous posts of this blog series, we introduced the Mondoo platform, its Terraform provider resources and data sources, exploring how they enhance

Why another article on that topic? We were already talking about mondoo in a previous article. Mondoo is brought to you by the team who gave you InSpec and the

As organizations strive to safeguard their digital assets, innovative solutions like Mondoo have emerged to enhance security and compliance across various

Ensuring the security of your Kubernetes clusters and workloads is important in today's digital landscape. This article introduces Mondoo's innovative tools for

In today's digital landscape, ensuring the security of your supply chain is key. The integration of CIS SecureSuite Certification with Mondoo's Compliance on

In an era where information security management is more crucial than ever, organizations are seeking innovative solutions to safeguard their digital assets

The cybersecurity landscape is constantly evolving, and with it, the regulatory requirements that businesses must meet. One of the most significant developments

In today's fast-paced DevOps environments, ensuring infrastructure compliance and security is paramount. Traditionally, HashiCorp Sentinel has been a go-to for

In today's dynamic and complex cloud environments, organisations face significant challenges in managing costs while ensuring compliance and operational

This article shows you how to secure your Kubernetes cluster with the Mondoo Operator. The Mondoo Operator simplifies the process of securing your Kubernetes

Securing your GitHub Organisation is crucial as it can contain sensitive code and data. It is therefore important to monitor contributors and contributions to

As the world's leading platform for software development and collaboration, GitHub sees millions of new repositories created every day. While this rapid growth

In this article, we will show you how to secure your Kubernetes cluster with Mondoo and GitHub Actions. We will use the Mondoo GitHub Action to scan deployed

In this article, we will show you how to secure your Kubernetes cluster with Mondoo and GitHub Actions. We will use the Mondoo GitHub Action to scan our

Protecting your digital assets isn't just about safeguarding data; it's about safeguarding your business's reputation, integrity, and longevity. With cyber

In the ever-evolving landscape of cloud infrastructure management, efficiently securing and monitoring resources is critical. This is where Mondoo comes in, a

We are expanding our offer with lectures, small bits of knowledge that offer the perfect introduction to a topic, and are pleased to give you a first insight

This is the second post in a series about IT compliance with Mondoo. This post will focus on how to add your own custom policies to Mondoo. Make sure to

This is the first post in a series about IT compliance with Mondoo. This post will focus on the basics of Mondoo and how you can use it to get insights about

Why Mondoo indead of InSpec? For me, testing infrastructure started with RSpec and ServerSpec. Then the [DevSec project] (https://dev-sec.io/) project taught me

What is mondoo mondoo is brought to you by the team who gave you InSpec and the DevSec Project with a passion to make IT operations human readable and