Inspectable collection
The collector gathers local Ubuntu configuration evidence into a bundle you can inspect without sending it to TacitSoft.
TacitSoft Diagnostics
Ubuntu STIG / CMMC Linux Preflight Bundle
Run a reviewable collector and inspect the generated bundle locally, or describe the problem first and receive a bounded Initial Assessment Report with observations, limitations, useful evidence, and a next step.
Compliance-aware framing
The assessment distinguishes STIG/CMMC readiness signals, evidence gaps, and implementation risk without claiming instant compliance.
Human signoff gates
High-risk areas such as PAM, SSHD, sudoers, auditd, AppArmor, and authentication changes are treated as review-first remediation work.
Bundle Workflow
What to expect while evidence stays local
This is a preflight workflow for teams preparing Ubuntu systems for CMMC, NIST 800-171, STIG, POA&M, SCC, STIGViewer, or eMASS evidence work. Collection stays local during the free assessment.
1
Collect
Run the Ubuntu STIG preflight collector on the target host or fleet sample. It packages OS, package, service, and security configuration signals into a bundle.
2
Inspect
Review the generated manifest, checksums, collector log, and raw artifacts locally. Remove anything your team is not ready to share.
3
Assess
Describe the problem in your own words. No bundle upload is accepted or required by the free-assessment form.
4
Decide
Use the Initial Assessment Report to decide which evidence, collector, paid Architecture & Delivery Review, or implementation path is warranted.
Possible Follow-On Outputs
Evidence and remediation positioning
Deeper control mapping and remediation planning require a separately agreed scope after the free assessment demonstrates relevance.
Control-impact map tied to observed Linux configuration signals
Evidence inventory for auditor, assessor, or internal review preparation
Prioritized remediation plan with risk notes and sequencing guidance
Optional implementation sprint or managed remediation support
Collector review expectations
- No hidden telemetry or silent upload behavior is part of the intended collector model.
- The bundle may include sensitive host, service, authentication, and security configuration details.
- Your team should keep the bundle local during the free assessment and inspect its manifest and artifacts before any later transfer.
- TacitSoft treats remediation as a controlled plan with dry-run, rollback, and human approval expectations.
Start with the problem
Request a free assessment before sharing evidence. TacitSoft will identify whether this collector, selected SCC outputs, or other evidence would make the next decision more useful.