Assessing the security posture of an OCI tenant 🔒

I previously wrote about how ShowOCI can be used to automagically document the configuration of an OCI tenant.

My next top tip is to run the OCI Security Health Check against your tenant. This tool compares the configuration of a tenant against the CIS OCI Foundations Benchmark and reports any issues that require remediation 🔐.

In today’s risky world where security breaches are a regular occurrence, it’s critical that you assess your security posture on a regular basis and perform any required remediation to ensure that you are a step ahead of the attackers – this is where the OCI Security Health check makes this a lot simpler for you (for your OCI workloads at least 😉.)

I ran this against my test tenancy using the Cloud Shell (it can also be run from a compute instance), with the following commands:

Step 1 – Download and Unzip the Assessment Scripts ⬇️

git clone https://github.com/oci-landing-zones/oci-cis-landingzone-quickstart.git

Step 2 – Run the Assessment 🏃

cd oci-cis-landingzone-quickstart/scripts
chmod +x standard.sh
./standard.sh

Step 3 – Inspect the Findings 🔎

Within the directory that the script is run from a folder is created that stores the output of the assessment:

In my case this was brendankgriffin_2026-08-17_08:42:17. This directory contained the following files:

To view these, I transferred them to my local machine using the download option within the Cloud Console.

The tool provides instructions on how to download a Zipped copy of the assessment output – this is presented when the assessment tool finishes.

I could then open the Zip file to review the findings, the first file I opened was cis_summary_report.html, which contains a summary of the findings of the assessment.