security-hardening

An evolving how-to guide for securing a Linux server.

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

A collection of awesome security hardening guides, tools and other resources

Open-source tool to enforce privacy & security best-practices on Windows, macOS and Linux, because privacy is sexy

Migrate C code to Rust

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨

user.js -- Firefox configuration hardening

Security automation content in SCAP, Bash, Ansible, and other formats

Hardening Ubuntu. Systemd edition.

Generate sandboxes for C/C++ libraries automatically

USBGuard is a software framework for implementing USB device authorization policies (what kind of USB devices are authorized) as well as method of use policies (how a USB device may interact with the system)

a collection about Windows 11

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

Easily configure macOS security settings from the terminal.

Wazuh - Docker containers

vet is a command-line tool that acts as a safety net for the risky curl | bash pattern. It lets you inspect, diff against previous versions, and lint remote scripts before asking for your explicit approval to execute. Promoting a safer, more transparent way to handle remote code execution.

Unofficial OpenClaw runbook for running agents day to day without burning money, exposing your gateway, or trusting random automation.

Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

Security Knowledge Framework (SKF) Python Flask / Angular project

Kubernetes RBAC static analysis & visualisation tool

Ansible role to apply a security baseline. Systemd edition.

Language-agnostic SLSA provenance generation for Github Actions

Plugins for Wazuh Dashboard

SDK providing threat detection & security monitoring for mobile devices. Works with Flutter, React Native, Android and iOS. Shield your app with free RASP. Detect reverse engineering, root (Magisk), jailbreak, Frida, emulators, bots, tampering and integrity issues, obfuscation, VPN usage, malware, and monitor device identification and fingerprint.