@theopolis have you seen this? https://www.open-scap.org/ its an open source tool supported by readhat that does some hardening checks using the SCAP Standard