Lynis: a tool to audit hardening and compliance of UNIX/Linux systems, based on standards as:

- CIS benchmarks
- NIST
- NSA
- OpenSCAP data

Give it a try

https://cisofy.com/lynis/