1. Images & Charts
  2. mongo-hardened-fips
Login

Echo is acquiring Minimus. See the announcementfor more details.

mongo-hardened-fips

mongo-hardened-fips

Data
Fips
Hardened
Stig
Updated 2 days ago

Compliance

Understand the compliance standards and security best practices supported by this image.

100% CIS Docker compliance100% CIS Mongo compliance100% NIST complianceFIPS 140-3 validated100% STIG compliance

CIS Mongo

CIS Mongo Compliance

100%
Passed

Scan Date

Sep 24, 2026

Image Tag

Latest

Checks

Analyzed
9
Passed
9
Failed
0

CIS MongoDB 8 Benchmark v1.0.0

View CIS Benchmark
Ensure the appropriate MongoDB software version/patches are installed
CIS ID
1.1
Status
Passed
Notes
Minimus updates the image's MongoDB package regularly to incorporate the latest official security releases and validates versions against supported vendor baselines. View the Minimus new version SLA for further information.
Ensure authentication is configured
CIS ID
2.1
Status
Passed
Hardened configuration
Notes
Authorization is explicitly enabled in the image configuration.
Ensure that MongoDB does not bypass authentication via the localhost exception
CIS ID
2.2
Status
Passed
Hardened configuration
Notes
Localhost authorization bypass is explicitly disabled by default (setParameter.enableLocalhostAuthBypass: false).
Ensure that MongoDB is run using a non-privileged, dedicated service account
CIS ID
3.3
Status
Passed
Notes
Minimus verified the configuration to ensure the mongod/mongos process owner is a dedicated non-root, non-privileged account.
Ensure federal information processing standard (FIPS) is enabled
CIS ID
4.4
Status
Passed
Notes
This image uses a NIST CMVP certified FIPS 140-3 cryptographic provider. The Minimus implementation is functionally equivalent to the MongoDB CIS Benchmark recommendation. See the FIPS tab for further information.
Ensure that logging captures as much information as possible
CIS ID
5.3
Status
Passed
Hardened configuration
Notes
Configured to disable quiet logging (systemLog.quiet: false).
Ensure that new entries are appended to the end of the log file
CIS ID
5.4
Status
Passed
Hardened configuration
Notes
Configured to append new entries to the end of log files as required (systemLog.logAppend: true).
Ensure that MongoDB uses a non-default port
CIS ID
6.1
Status
Passed
Hardened configuration
Notes
This image is configured to use a non-default port (net.port is not configured to 27017).
Ensure that server-side scripting is disabled if not needed
CIS ID
6.3
Status
Passed
Hardened configuration
Notes
The default configuration is set to disable server-side JS features with security.javascriptEnabled: false.