Assuria Auditor is an independent security configuration assurance, vulnerability assessment, change detection and compliance reporting system for enterprise servers.  

Assuria auditor examines and verifies system settings, the selected system options and user preferences of computer systems against an organisations system configuration policy. Variances and deficiencies from the desired configuration policy are highlighted.

Features

• Policy Compliance – Assuria Auditor features regulatory and standards compliance reporting including SOX, PCI, FISMA, HIPAA and ISO 27001 and ISO 27002 (ISO 17799).
  
  Assuria Auditor can be tailored to your requirements, allowing you to adjust checks and policies to match the specific requirements of your security configuration policy, thus ensuring systems are compliant.
   

• Change Detection – Assuria Auditor allows you to create a systems baseline and monitor the system for any changes to that baseline.
   

• Distributed Management – Enables distributed operational access to the Assuria Auditor Console from anywhere on an enterprise network.
   

• Fully Scalable – Assuria Auditor gives you the option to manage large populations of agents from a single Assuria Auditor Console.
   

• Powerful, Flexible Reporting – Standard reports, designed for both technical and managerial audiences, identify areas of concern, the consequences of a security breach and the remedy for each out-of-policy mis-configuration or vulnerability.

All Assuria Auditor agents are fully supported in Virtual Environments running on products such as VMware or XEN.