Hardening Open Source Projects

An evolving how-to guide for securing a Linux server.

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening

Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

A collection of awesome security hardening guides, tools and other resources

This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.

Awesome Node.js Security resources

user.js -- Firefox configuration hardening

Security automation content in SCAP, Bash, Ansible, and other formats

Kubernetes Security - Best Practice Guide

HardeningKitty and Windows Hardening Settings

Linux Kernel Defence Map shows the relationships between vulnerability classes, exploitation techniques, bug detection mechanisms, and defence technologies

Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS repositories and doesn't include patches not relevant to the build targets used on GrapheneOS.

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.

Hardening Ubuntu. Systemd edition.

HardeningKitty - Checks and hardens your Windows configuration

A curated list of awesome Security Hardening techniques for Windows.

Windows 10/11 Guide. Including Windows Security tools, Encryption, Nextcloud, Graphics, Gaming, Virtualization, Windows Subsystem for Linux (WSL 2), Software Apps, and Resources.

Simple checklist to help you deploying the most important areas of the GNU/Linux production systems - work in progress.

Collection of the most common vulnerabilities found in iOS applications

Enhance the security and privacy of your Windows 10 and Windows 11 deployments with our fully optimized, hardened, and debloated script. Adhere to industry best practices and Department of Defense STIG/SRG requirements for optimal performance and security.

🔥 A powerful MongoDB auditing and pentesting tool 🔥

a collection about Windows 11

Secure multithreaded packet sniffer

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

Modern Memory Safety in C/C++

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

Easily configure macOS security settings from the terminal.

Automated System Hardening Framework

PCI-DSS compliant Debian 11/12 hardening

DevSec Linux Baseline - InSpec Profile

Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

Full set of AppArmor policies

This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.

A collection of OSX and iOS security resources

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

Spoilerwall introduces a brand new concept in the field of network hardening. Avoid being scanned by spoiling movies on all your ports!

AWS Auditing & Hardening Tool

Ansible role for security hardening. Mirror of code maintained at opendev.org.

Security Auditor Utility for GraphQL APIs

Repository of Hardening Guides

Ansible role to apply a security baseline. Systemd edition.

Linux Kernel Runtime Guard

CIS Docker Benchmark - InSpec Profile

Better AWS SSM Session manager CLI client

Automated CIS Benchmark Compliance Remediation for RHEL 7 with Ansible

Hardened Debian GNU/Linux distro auditing

SUHOSIN [수호신] for PHP 5.x - The PHP security extension.

This repository is a collection of resources to prepare for the Certified Kubernetes Security Specialist (CKSS) exam.

This chef cookbook provides numerous security-related configurations, providing all-round base protection.

HardenedBSD development tree.

h2t (HTTP Hardening Tool) scans a website and suggests security headers to apply

A Fast and Safe Python based on PyPy

DevSec Examples