hardening

There are 58 repositories under hardening topic.

imthenachoman / How-To-Secure-A-Linux-Server
An evolving how-to guide for securing a Linux server.
linux hardening hardening-steps security security-hardening server linux-server cc-by-sa
19506
CISOfy / lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
shell linux pci-dss compliance security-audit security-hardening security-scanner security-vulnerability hipaa unix vulnerability-detection vulnerability-scanners vulnerability-assessment devops devops-tools system-hardening hardening auditing gdpr security-tools
Language:Shell 14645
prowler
prowler-cloud / prowler
Prowler is the Open Cloud Security platform for AWS, Azure, GCP, Kubernetes, M365 and more. It helps for continuous monitoring, security assessments & audits, incident response, compliance, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, ENS and more
aws azure cis-benchmark cloud cloudsecurity compliance cspm devsecops forensics gcp gdpr hardening iam multi-cloud python security security-audit security-hardening security-tools well-architected
Language:Python 12101
drduh / YubiKey-Guide
Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
gnupg gpg gpg-agent gpg-configuration hardening pgp remote-access rsa-cryptography security smartcard ssh yubikey
Language:HTML 11886
trimstray / the-practical-linux-hardening-guide
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
linux linux-hardening linux-security security hardening audit guide manual checklist cis pci-dss openscap redhat-enterprise-linux centos
10266
bunkerweb
bunkerity / bunkerweb
🛡️ Open-source and next-generation Web Application Firewall (WAF)
nginx modsecurity docker security dnsbl reverse-proxy bunkerized-nginx hardening web-security security-tuning cybersecurity devsecops antibot letsencrypt swarm kubernetes devops hosting waf web-application-firewall
Language:Python 9069
dev-sec / ansible-collection-hardening
This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
ansible ansible-collection collection devsec hacktoberfest hardening linux mysql-hardening nginx nginx-hardening os-hardening playbook protection role ssh-hardening sysctl
Language:Jinja 4579
hardentools / hardentools
Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.
hardening security windows
Language:Go 2949
ComplianceAsCode / content
Security automation content in SCAP, Bash, Ansible, and other formats
ansible application-security cce compliance cpe cybersecurity hardening information-security ospp oval pci-dss scap security security-automation security-hardening security-profile security-tools stig usgcb xccdf
Language:Shell 2531
0x6d69636b / windows_hardening
HardeningKitty and Windows Hardening Settings
windows hardening security windows-10 blueteam defense audit powershell windows-hardening registry checklist compliance bsi cis security-baseline sisyphus stig windows-11 windows-server
Language:PowerShell 2526
PaulSec / awesome-windows-domain-hardening
A curated list of awesome Security Hardening techniques for Windows.
hardening security windows
1766
Windows-11-Guide
mikeroyal / Windows-11-Guide
Windows 10/11 Guide. Including Windows Security tools, Encryption, Nextcloud, Graphics, Gaming, Virtualization, Windows Subsystem for Linux (WSL 2), Software Apps, and Resources.
windows-11 windows11 privacy-protection windows-terminal optimization winui3 tweaks windows-defender gaming windows-subsystem-linux visual-studio-code winui uwp hardening windows-desktop debloat wsl active-directory nextcloud windows10
Language:C# 1661
scipag / HardeningKitty
HardeningKitty - Checks and hardens your Windows configuration
audit blueteam checklist defense hardening powershell registry security windows windows-10 windows-server
Language:PowerShell 1594
konstruktoid / hardening
Hardening Ubuntu. Systemd edition.
hacktoberfest hardening information-security security security-automation security-compliance security-hardening security-tools shell systemd ubuntu ubuntu-server
Language:Shell 1434
GrapheneOS / hardened_malloc
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability / integration over time.
grapheneos hardening malloc malloc-library memory memory-allocation memory-allocator quarantine security slab-allocator
Language:C 1388
stampery / mongoaudit
🔥 A powerful MongoDB auditing and pentesting tool 🔥
authentication cli database encryption hardening infosec mongodb pentesting
Language:Python 1323
Windows-Optimize-Harden-Debloat
simeononsecurity / Windows-Optimize-Harden-Debloat
Enhance the security and privacy of your Windows 10 and Windows 11 deployments with our fully optimized, hardened, and debloated script. Adhere to industry best practices and Department of Defense STIG/SRG requirements for optimal performance and security.
windows stig-compliant mitigations privacy automation debotnet windows10 hardware-requirements microsoft harden debloat cyber stigs windows-defender privacy-script windows-desktop windows-10 telemetry hardening security
Language:PowerShell 1315
Windows11_Hardening
beerisgood / Windows11_Hardening
a collection about Windows 11
defender-application-guard defender-credential-guard hardening microsoft security security-hardening windows windows-defender windows10 windows11
1183
nozaq / terraform-aws-secure-baseline
Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.
terraform aws security security-hardening terraform-modules hardening cis-benchmark aws-auditing security-tools devops terraform-module
Language:HCL 1183
alichtman / stronghold
Easily configure macOS security settings from the terminal.
command-line command-line-tool hardening macos macos-setup osx security security-hardening
Language:Python 1125
grapheneX
grapheneX / grapheneX
Automated System Hardening Framework
hacktoberfest hardening hardening-commands security
Language:Python 982
step-security / harden-runner
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
github-actions actions supply-chain-security hardening security-hardening runners egress-filtering network-security runtime-security
Language:TypeScript 877
jvoisin / snuffleupagus
Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!
php7 security hardening c php elephant php-module security-hardening
Language:PHP 818
dev-sec / linux-baseline
DevSec Linux Baseline - InSpec Profile
audit baseline devsec hardening inspec linux security
Language:Ruby 802
Jsitech / JShielder
Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark
linux cis-benchmark linux-server hardening ubuntu-server centos7 lamp-stack hardening-steps iptables ubuntu1604 ubuntu1804 security-hardening system-hardening modsecurity lamp-deployer lemp-deployer
Language:PHP 779
dev-sec / ansible-ssh-hardening
This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.
ansible ssh-configuration playbook role hardening protection ssh-server ssh-agent ssh-hardening ssh
Language:HTML 778
DenizParlak / Zeus
AWS Auditing & Hardening Tool
cloudtrail aws-auditing hardening aws-hardening aws
Language:Shell 711
roddhjav / apparmor.d
Full set of AppArmor policies
apparmor mandatory-access-control security hardening apparmor-profiles linux apparmor-profile role-based-access-control
Language:Go 652
konstruktoid / ansible-role-hardening
Ansible role to apply a security baseline. Systemd edition.
almalinux amazon-linux ansible auditd centos debian hacktoberfest hardening information-security openscap security security-compliance security-hardening security-tools systemd ubuntu vagrant
Language:Jinja 560
Normation / rudder
Rudder is a configuration and security automation platform. Manage your Cloud, hybrid or on-premises infrastructure in a simple, scalable and dynamic way.
auditing automation compliance configuration-management continuous-configuration devops hardening patch-management secops security security-posture
Language:Scala 540
xen0l / aws-gate
Better AWS SSM Session manager CLI client
aws aws-ssm session-manager cli ec2-instances ec2 aws-ssm-agent ssh access-control iam-access scp ssh-session ssh-support hardening
Language:Python 516
dev-sec / cis-docker-benchmark
CIS Docker Benchmark - InSpec Profile
cis-docker-benchmark inspec docker security hardening
Language:Ruby 504
ibrahimjelliti / CKSS-Certified-Kubernetes-Security-Specialist
This repository is a collection of resources to prepare for the Certified Kubernetes Security Specialist (CKSS) exam.
kubernetes security certification hardening golang cncf cloud-native vulnerabilities monitoring logging cluster ckss cks cks-exam cluster-hardening kubernetes-platforms securing-kubernetes
Language:HTML 481
sektioneins / suhosin
SUHOSIN [수호신] for PHP 5.x - The PHP security extension.
hardening php suhosin
Language:C 469
dolevf / graphql-cop
Security Auditor Utility for GraphQL APIs
auditing blue-team graphql hacking hardening penetration-testing red-team security
Language:Python 446
dev-sec / chef-os-hardening
This chef cookbook provides numerous security-related configurations, providing all-round base protection.
hardening devops linux security chef chef-cookbook
Language:Ruby 443

hardening

imthenachoman / How-To-Secure-A-Linux-Server

CISOfy / lynis

prowler-cloud / prowler

drduh / YubiKey-Guide

trimstray / the-practical-linux-hardening-guide

bunkerity / bunkerweb

dev-sec / ansible-collection-hardening

hardentools / hardentools

ComplianceAsCode / content

0x6d69636b / windows_hardening

PaulSec / awesome-windows-domain-hardening

mikeroyal / Windows-11-Guide

scipag / HardeningKitty

konstruktoid / hardening

GrapheneOS / hardened_malloc

stampery / mongoaudit

simeononsecurity / Windows-Optimize-Harden-Debloat

beerisgood / Windows11_Hardening

nozaq / terraform-aws-secure-baseline

alichtman / stronghold

grapheneX / grapheneX

step-security / harden-runner

jvoisin / snuffleupagus

dev-sec / linux-baseline

Jsitech / JShielder

dev-sec / ansible-ssh-hardening

DenizParlak / Zeus

roddhjav / apparmor.d

konstruktoid / ansible-role-hardening

Normation / rudder

xen0l / aws-gate

dev-sec / cis-docker-benchmark

ibrahimjelliti / CKSS-Certified-Kubernetes-Security-Specialist

sektioneins / suhosin

dolevf / graphql-cop

dev-sec / chef-os-hardening