Getting Started

Overview

SecureBaseline Cloud is a Hardening as a Service platform that automates CIS (Center for Internet Security) compliance scanning and hardening for Linux servers.

First Login

  1. Open the application URL in your browser
  2. Enter your email and password
  3. Click Sign In

Default Credentials

Installation TypeCredentials
All-in-OnePassword is located in /var/lib/haas/credentials.txt on the server
Yandex Cloud AppsUser sets the password during deployment

Navigation

Menu ItemDescription
HostsServer management
ComplianceSecurity scanning
JobsHardening jobs
SchedulesAutomated tasks
AIChat and YandexGPT settings
AuditEvent logs
SettingsSystem configuration

Quick Start Workflow

1. Create Credentials

  1. Go to Hosts
  2. Click Manage Credentials
  3. Enter name
  4. Select type (Password or SSH Key)
  5. Enter data
  6. Click Create

2. Add a Host

  1. Click Add Host
  2. Fill in:
    • Hostname
    • IP Address
    • SSH Port (22)
    • SSH User
    • Credentials
  3. Click Create

OS will be detected automatically.

3. Compliance Scan

  1. Go to Compliance
  2. Select host
  3. Click New Scan
  4. Select SCAP profile
  5. Click Create Scan

Wait for completion (5-15 minutes).

4. View Results

  1. Click Results for completed scan
  2. Review passed/failed rules
  3. Click Report for HTML report

5. Security Hardening

  1. Go to Hosts
  2. Click Harden next to the host
  3. Select profile (cis-level1 or cis-level2)
  4. Click Start Hardening

6. Verify Results

  1. Go to Jobs
  2. Wait for job completion
  3. Run a new scan to verify improvements

Theme Toggle

Click the lightbulb icon in the navigation to switch between light and dark themes.

Language Toggle

Select EN or RU from the navigation dropdown menu.

Next Steps