vigocli compliance report

Generate compliance reports mapped to security frameworks.

Subcommands

compliance

Generate a HIPAA compliance report with 164.312 control mappings, fleet status, and audit chain verification.

vigocli compliance report compliance [flags]

Flags:

Examples:

# JSON to stdout
vigocli compliance report compliance

# HTML report to file
vigocli compliance report compliance --format html --output /tmp/report.html

# JSON to file
vigocli compliance report compliance --format json --output /tmp/compliance.json

hitrust

Generate a HITRUST CSF compliance report with control mappings across 8 domains (01 Access Control, 06 Compliance, 09 Operations, 10 Maintenance, etc.).

vigocli compliance report hitrust [flags]

Flags:

Examples:

vigocli compliance report hitrust
vigocli compliance report hitrust --format html --output /tmp/hitrust-report.html

soc2

Generate a SOC 2 Trust Services Criteria compliance report (CC1-CC9 Common Criteria, A1 Availability, C1 Confidentiality, PI1 Processing Integrity).

vigocli compliance report soc2 [flags]

Flags:

Examples:

vigocli compliance report soc2
vigocli compliance report soc2 --format html --output /tmp/soc2-report.html

pci

Generate a PCI DSS v4.0 compliance report (Req 1-12: network security, config hardening, access control, audit trails, file integrity monitoring).

vigocli compliance report pci [flags]

Flags:

Examples:

vigocli compliance report pci
vigocli compliance report pci --format html --output /tmp/pci-report.html

cis

Generate a CIS Benchmark compliance report for Ubuntu, RHEL, and Windows Server.

vigocli compliance report cis [flags]

Flags:

Examples:

vigocli compliance report cis
vigocli compliance report cis --format html --output /tmp/cis-report.html

nist

Generate a NIST 800-53 compliance report (287 Moderate-baseline controls across 20 families: AC, AT, AU, CA, CM, CP, IA, IR, MA, MP, PE, PL, PM, PS, PT, RA, SA, SC, SI, SR).

vigocli compliance report nist
vigocli compliance report nist --format html --output /tmp/nist-report.html

iso27001

Generate an ISO 27001 compliance report (93 Annex A controls across the 2022-revision themes: organizational, people, physical, technological).

vigocli compliance report iso27001
vigocli compliance report iso27001 --format html --output /tmp/iso27001-report.html

gdpr

Generate a GDPR compliance report (46 articles covering technical and organizational measures, data subject rights, breach handling, DPO, and transfers).

vigocli compliance report gdpr
vigocli compliance report gdpr --format html --output /tmp/gdpr-report.html

nerccip

Generate a NERC CIP compliance report (18 requirements across 8 CIP standards for energy sector).

vigocli compliance report nerccip
vigocli compliance report nerccip --format html --output /tmp/nerccip-report.html

cyberessentials

Generate a Cyber Essentials+ compliance report (29 controls across 5 themes — UK Government cybersecurity certification).

vigocli compliance report cyberessentials
vigocli compliance report cyberessentials --format html --output /tmp/ce-report.html

executive

Generate an executive compliance summary for non-technical audiences. Includes compliance score with rating, 30-day trend chart, framework coverage at a glance, fleet summary with friendly labels, top 10 issues in plain English, and audit chain status. The HTML version is designed for printing as PDF via Ctrl+P.

vigocli compliance report executive [flags]

Flags:

Examples:

# JSON to stdout
vigocli compliance report executive

# Print-friendly HTML
vigocli compliance report executive --format html --output /tmp/executive-summary.html

# JSON to file
vigocli compliance report executive --format json --output /tmp/executive.json

audit-bundle

Download a self-contained zip suitable for handing to an external auditor: HTML + PDF report, per-control evidence, audit-chain entries, fleet convergence history, and decrypted copies of every uploaded compliance document linked to the framework's controls.

vigocli compliance report audit-bundle <framework> [flags]

Args:

Flags:

Permissions: audit.read is mandatory; compliance.read is checked separately on the server and gates inclusion of the docs/ directory in the bundle. Without compliance.read, the bundle still ships but its docs/ folder is empty and evidence.json omits the per-control document list.

Examples:

# Default: 365-day HIPAA bundle, written to ./vigo-audit-bundle-compliance.zip
vigocli compliance report audit-bundle compliance

# Quarterly PCI snapshot
vigocli compliance report audit-bundle pci --period 90d --output pci-q1.zip

# Annual NIST 800-53 evidence package
vigocli compliance report audit-bundle nist --period 12mo --output nist-annual.zip

Verify the bundle after extraction:

unzip vigo-audit-bundle-compliance.zip -d audit/
cd audit
jq -r '.artifacts[] | "\(.sha256)  \(.path)"' manifest.json | sha256sum -c

Every line should print <path>: OK. A mismatch indicates the bundle was tampered with after generation.