Cybersecurity · advanced

Automated Cybersecurity Compliance & Patch Auditor

A security auditing tool that scans systems for vulnerabilities, missing patches, and config drift — outputs a professional PDF report.

Project overview

IT Support today is inseparable from Cybersecurity. This project shows you have a "security-first" mindset and the technical skills to proactively identify and document risks, making you an asset for compliance-heavy industries like Finance or Healthcare.

Real-world use case

An IT department at a healthcare clinic runs this script weekly to ensure all workstations are patched and no unauthorized ports are open, maintaining HIPAA compliance.

Tools and technologies

Skills you can demonstrate

Vulnerability Assessment, Network Security, Scripting

Build roadmap

  1. Set up a test environment
    Use a local VM or Docker container as your scan target — never scan networks you don't own. Install nmap, python-nmap, and reportlab.
  2. Build the network scanner
    Write a Python script that uses python-nmap to discover hosts and identify open ports. Save results to JSON.
  3. Add compliance checks
    Create a CIS Benchmark checker — scripts that verify things like password policy, firewall status, and unauthorized services.
  4. Design the PDF report
    Use ReportLab to build a professional report with an executive summary, findings by severity, and screenshots. This is what recruiters will see.
  5. Add the AI risk-scoring layer
    Feed findings to Claude or GPT and ask for a prioritized remediation plan. Include it in the report as "AI Analyst Notes."
  6. Automate with GitHub Actions
    Set it up to run weekly against a lab target and publish the report. Include a sample PDF in your repo.

Ways to extend the project

Use an AI model to analyze audit results and provide a "Risk Score" with a prioritized list of remediation steps tailored to the specific environment.

How to showcase your work

Open this project in BuildersBenchBrowse Cybersecurity projects