Lynis Security Auditor
ToolLynis is a free, open-source security auditor from CISOfy for Linux, macOS and other Unix systems. Nothing to install: extract the archive, run lynis audit system, and hundreds of tests walk the server and point out where hardening is missing. It makes a quick before-and-after check for any baseline, which is the part auditors like and the part you will actually rerun.