hardening

An evolving how-to guide for securing a Linux server.

Community guide to securing and improving privacy on macOS.

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL

Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.

Security automation content in SCAP, Bash, Ansible, and other formats

HardeningKitty and Windows Hardening Settings

Free Windows, Mac and Linux cleaner, scanner, and more.

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.

Hardening Ubuntu. Systemd edition.

HardeningKitty - Checks and hardens your Windows configuration

Windows 10/11 Guide. Including Windows Security tools, Encryption, Nextcloud, Graphics, Gaming, Virtualization, Windows Subsystem for Linux (WSL 2), Software Apps, and Resources.

Enhance the security and privacy of your Windows 10 and Windows 11 deployments with our fully optimized, hardened, and debloated script. Adhere to industry best practices and Department of Defense STIG/SRG requirements for optimal performance and security.

a collection about Windows 11

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

Easily configure macOS security settings from the terminal.

Automated System Hardening Framework

DevSec Linux Baseline - InSpec Profile

Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

Full set of AppArmor policies

Rudder is a configuration and security automation platform. Manage your Cloud, hybrid or on-premises infrastructure in a simple, scalable and dynamic way.

Security Auditor Utility for GraphQL APIs

Debloat and harden Brave Browser on Linux, macOS, and Windows using Chromium enterprise policies. Curses TUI on Linux/macOS, native GUI on Windows. 79 policies, 6 presets, zero dependencies.

Ansible role to apply a security baseline. Systemd edition.

Linux Kernel Runtime Guard