Security Hardening Modules is Atlas Fortify's baseline library. Start from a built-in baseline for CMMC 2.0 (Level 2 / NIST SP 800-171), PCI DSS, or SOC 2, tailor it by excluding the controls that do not apply to you, and see each control pass or fail against your environment. For CMMC, Atlas also gives you an SPRS-style score and can apply a hardened Level 2 baseline to your session hosts in one step. Group Policy settings you configure in the built-in editor can be saved as your own enforceable baseline.
Coming soon to GCC High. Security Hardening Modules is in development and is not yet available in Atlas AVD. It will be supported in GCC High deployments. This page describes what it will do; it will be included in the Atlas AVD plan and above when it ships.
Key capabilities
- Built-in baselines for CMMC 2.0 Level 2 (NIST SP 800-171), PCI DSS, and SOC 2
- Custom baselines from CMMC, PCI DSS, SOC 2, or CIS v8 controls, with the ones you do not need excluded
- Pass/fail per control, and an SPRS-style CMMC score with the projected score after remediation
- Fortify Enclave: apply a hardened CMMC Level 2 baseline to session hosts in one step
- Group Policy editor: configure gpedit settings and save them as an enforceable baseline for a host pool
- Baseline results exported as JSON or CSV, plus an evidence report for assessors
Planned for: Atlas AVD plan and above
Security Hardening Modules will be included in every Atlas AVD subscription when it ships.