cyclop-security-checkup

Shows how well the computer is protected, in plain words: the Lynis hardening index (named as such, with the date of the audit and its first suggestions), and a list of checks inspired by the ANSSI recommendations for GNU/Linux (updates, firewall, AppArmor, kernel protections, disk encryption, Secure Boot, screen lock, remote access, audit log, USB devices). Lynis runs weekly in the background at the lowest priority. It also looks, offline, for known traces of commercial spyware in the browsers, with the open indicators of the zero-breach project (Apache-2.0 code, CC0 indicators). Nothing leaves the computer. A quick search also runs once a month in the background (user timer, lowest priority) and notifies only if a known trace is found. Settings shows it in Privacy & Security > Security checkup.

sudo apt install cyclop-security-checkup