Don't let the boring parts of system security get ahead of you. InSpec is a testing tool with infrastructure security at its core. Using InSpec, your team can create and manage profiles to tackle the complex requirements of system security in a distributed environment.-Ensure that system and service accounts are appropriately locked down.-Verify that prohibited services are disabled.-Certify that your infrastructure has been patched to the latest upstream versions.The flexibility of InSpec allows you to make these tasks part of your continuous workflow, ensuring that all of your changes meet security requirements. This talk will cover the core components of the InSpec workflow and the shared components provided by the InSpec open source community.