hardening
There are 464 repositories under hardening topic.
imthenachoman/How-To-Secure-A-Linux-Server
An evolving how-to guide for securing a Linux server.
CISOfy/lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
drduh/YubiKey-Guide
Guide to using YubiKey for GnuPG and SSH
prowler-cloud/prowler
Prowler is an Open Cloud Security tool for AWS, Azure, GCP and Kubernetes. It helps for continuos monitoring, security assessments and audits, incident response, compliance, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more.
trimstray/the-practical-linux-hardening-guide
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
bunkerity/bunkerweb
🛡️ Open-source and next-generation Web Application Firewall (WAF)
dev-sec/ansible-collection-hardening
This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
hardentools/hardentools
Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.
0x6d69636b/windows_hardening
HardeningKitty and Windows Hardening Settings
ComplianceAsCode/content
Security automation content in SCAP, Bash, Ansible, and other formats
PaulSec/awesome-windows-domain-hardening
A curated list of awesome Security Hardening techniques for Windows.
mikeroyal/Windows-11-Guide
Windows 10/11 Guide. Including Windows Security tools, Encryption, Nextcloud, Graphics, Gaming, Virtualization, Windows Subsystem for Linux (WSL 2), Software Apps, and Resources.
konstruktoid/hardening
Hardening Ubuntu. Systemd edition.
scipag/HardeningKitty
HardeningKitty - Checks and hardens your Windows configuration
stampery/mongoaudit
🔥 A powerful MongoDB auditing and pentesting tool 🔥
GrapheneOS/hardened_malloc
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability / integration over time.
simeononsecurity/Windows-Optimize-Harden-Debloat
Enhance the security and privacy of your Windows 10 and Windows 11 deployments with our fully optimized, hardened, and debloated script. Adhere to industry best practices and Department of Defense STIG/SRG requirements for optimal performance and security.
nozaq/terraform-aws-secure-baseline
Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.
beerisgood/Windows11_Hardening
a collection about Windows 11
alichtman/stronghold
Easily configure macOS security settings from the terminal.
grapheneX/grapheneX
Automated System Hardening Framework
jvoisin/snuffleupagus
Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!
dev-sec/linux-baseline
DevSec Linux Baseline - InSpec Profile
dev-sec/ansible-ssh-hardening
This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.
Jsitech/JShielder
Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark
DenizParlak/Zeus
AWS Auditing & Hardening Tool
step-security/harden-runner
Network egress filtering and runtime security for GitHub-hosted and self-hosted runners
konstruktoid/ansible-role-hardening
Ansible role to apply a security baseline. Systemd edition.
Normation/rudder
Rudder is a configuration and security automation platform. Manage your Cloud, hybrid or on-premises infrastructure in a simple, scalable and dynamic way.
xen0l/aws-gate
Better AWS SSM Session manager CLI client
dev-sec/cis-docker-benchmark
CIS Docker Benchmark - InSpec Profile
ibrahimjelliti/CKSS-Certified-Kubernetes-Security-Specialist
This repository is a collection of resources to prepare for the Certified Kubernetes Security Specialist (CKSS) exam.
ansible-lockdown/RHEL7-CIS
Ansible role for Red Hat 7 CIS Baseline
roddhjav/apparmor.d
Full set of AppArmor profiles (~ 1500 profiles)
sektioneins/suhosin
SUHOSIN [수호신] for PHP 5.x - The PHP security extension.
dev-sec/chef-os-hardening
This chef cookbook provides numerous security-related configurations, providing all-round base protection.