The present application provides a network security compliance automatic detection method and apparatus. The method includes: establishing a detection index library, where the detection index libraryincludes detection indicators of each information system; combining different types of detection indicators to form a corresponding detection template; invoking a corresponding detection script according to a detection target selected by a user, to sequentially detect the information systems, comparing the detection result with the detection indicator in the detection template to determine whetherthe detection indicator meets a requirement, and generating a list of problems for the detection indicator that does not meet the requirement; and performing repeated detection on the information system according to the list of problems. The detection script is automatically invoked according to the detected target to reduce false negatives and false positives caused by human intervention. It canbe traced back to facilitate inspection of past detection work.