hardening

There are 50 repositories under hardening topic.

imthenachoman / How-To-Secure-A-Linux-Server
An evolving how-to guide for securing a Linux server.
cc-by-sa hardening hardening-steps linux linux-server security security-hardening server
16771
CISOfy / lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
shell linux pci-dss compliance security-audit security-hardening security-scanner security-vulnerability hipaa unix vulnerability-detection vulnerability-scanners vulnerability-assessment devops devops-tools system-hardening hardening auditing gdpr security-tools
Language:Shell 12581
drduh / YubiKey-Guide
Guide to using YubiKey for GnuPG and SSH
gnupg gpg gpg-agent gpg-configuration hardening pgp remote-access rsa-cryptography security smartcard ssh yubikey
Language:HTML 10788
trimstray / the-practical-linux-hardening-guide
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
audit centos checklist cis guide hardening linux linux-hardening linux-security manual openscap pci-dss redhat-enterprise-linux security
9703
prowler
prowler-cloud / prowler
Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
security security-tools security-audit security-hardening hardening aws cis-benchmark compliance gdpr forensics cloud well-architected devsecops azure iam python gcp multi-cloud
Language:Python 9639
dev-sec / ansible-collection-hardening
This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
ansible sysctl protection hardening role playbook linux os-hardening collection mysql-hardening ssh-hardening devsec nginx nginx-hardening ansible-collection hacktoberfest
Language:Jinja 3704
bunkerweb
bunkerity / bunkerweb
🛡️ Make your web services secure by default !
nginx modsecurity docker security dnsbl reverse-proxy bunkerized-nginx hardening web-security security-tuning cybersecurity devsecops antibot letsencrypt swarm kubernetes devops hosting waf web-application-firewall
Language:Python 3515
hardentools / hardentools
Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.
hardening security windows
Language:Go 2815
0x6d69636b / windows_hardening
HardeningKitty and Windows Hardening settings and configurations
windows hardening security windows-10 blueteam defense audit powershell windows-hardening registry checklist compliance
Language:PowerShell 2178
ComplianceAsCode / content
Security automation content in SCAP, Bash, Ansible, and other formats
security compliance scap xccdf oval cpe cce usgcb pci-dss ospp stig application-security security-tools security-hardening security-automation security-profile hardening information-security cybersecurity ansible
Language:Shell 2093
PaulSec / awesome-windows-domain-hardening
A curated list of awesome Security Hardening techniques for Windows.
windows hardening security
1713
konstruktoid / hardening
Hardening Ubuntu. Systemd edition.
ubuntu ubuntu-server shell hardening security security-hardening systemd security-tools security-automation security-compliance information-security hacktoberfest
Language:Shell 1317
stampery / mongoaudit
🔥 A powerful MongoDB auditing and pentesting tool 🔥
authentication cli database encryption hardening infosec mongodb pentesting
Language:Python 1309
Windows-11-Guide
mikeroyal / Windows-11-Guide
Windows 10/11 Guide. Including Windows Security tools, Encryption, Nextcloud, Graphics, Gaming, Virtualization, Windows Subsystem for Linux (WSL 2), Software Apps, and Resources.
windows-11 windows11 privacy-protection windows-terminal optimization winui3 tweaks windows-defender gaming windows-subsystem-linux visual-studio-code winui uwp hardening windows-desktop debloat wsl active-directory nextcloud windows10
Language:C# 1265
GrapheneOS / hardened_malloc
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability / integration over time.
grapheneos hardening malloc malloc-library memory memory-allocation memory-allocator quarantine security slab-allocator
Language:C 1173
scipag / HardeningKitty
HardeningKitty - Checks and hardens your Windows configuration
windows windows-10 windows-server hardening audit checklist powershell defense blueteam security registry
Language:PowerShell 1163
nozaq / terraform-aws-secure-baseline
Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.
terraform aws security security-hardening terraform-modules hardening cis-benchmark aws-auditing security-tools devops terraform-module
Language:HCL 1120
alichtman / stronghold
Easily configure macOS security settings from the terminal.
macos-setup macos security osx security-hardening hardening command-line-tool command-line
Language:Python 1068
Windows-Optimize-Harden-Debloat
simeononsecurity / Windows-Optimize-Harden-Debloat
Enhance the security and privacy of your Windows 10 and Windows 11 deployments with our fully optimized, hardened, and debloated script. Adhere to industry best practices and Department of Defense STIG/SRG requirements for optimal performance and security.
windows stig-compliant mitigations privacy automation debotnet windows10 hardware-requirements microsoft harden debloat cyber stigs windows-defender privacy-script windows-desktop windows-10 telemetry hardening security
Language:PowerShell 1038
Windows11_Hardening
beerisgood / Windows11_Hardening
a collection about Windows 11
hardening windows10 security-hardening windows-defender defender-credential-guard defender-application-guard security windows11 windows microsoft
995
grapheneX
grapheneX / grapheneX
Automated System Hardening Framework
hacktoberfest hardening hardening-commands security
Language:Python 914
dev-sec / ansible-ssh-hardening
This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.
ansible ssh-configuration playbook role hardening protection ssh-server ssh-agent ssh-hardening ssh
Language:HTML 773
dev-sec / linux-baseline
DevSec Linux Baseline - InSpec Profile
inspec audit security devsec baseline hardening linux
Language:Ruby 757
Jsitech / JShielder
Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark
linux cis-benchmark linux-server hardening ubuntu-server centos7 lamp-stack hardening-steps iptables ubuntu1604 ubuntu1804 security-hardening system-hardening modsecurity lamp-deployer lemp-deployer
Language:PHP 736
jvoisin / snuffleupagus
Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!
c elephant hardening php php-module php7 security security-hardening
Language:PHP 734
DenizParlak / Zeus
AWS Auditing & Hardening Tool
cloudtrail aws-auditing hardening aws-hardening aws
Language:Shell 704
step-security / harden-runner
Network egress filtering and runtime security for GitHub-hosted and self-hosted runners
actions egress-filtering github-actions hardening network-security runners runtime-security security-hardening supply-chain-security
Language:TypeScript 525
konstruktoid / ansible-role-hardening
Ansible role to apply a security baseline. Systemd edition.
ansible systemd auditd ubuntu centos hardening security security-hardening vagrant openscap information-security security-tools security-compliance debian almalinux hacktoberfest amazon-linux
Language:Jinja 502
dev-sec / cis-docker-benchmark
CIS Docker Benchmark - InSpec Profile
cis-docker-benchmark inspec docker security hardening
Language:Ruby 475
ansible-lockdown / RHEL7-CIS
Ansible role for Red Hat 7 CIS Baseline
cis security-hardening rhel7 ansible-role security hardening compliance-automation redhat7 redhat-ansible compliance-as-code redhat security-automation security-tools benchmark benchmark-framework cis-benchmark
Language:YAML 473
ibrahimjelliti / CKSS-Certified-Kubernetes-Security-Specialist
This repository is a collection of resources to prepare for the Certified Kubernetes Security Specialist (CKSS) exam.
kubernetes security certification hardening golang cncf cloud-native vulnerabilities monitoring logging cluster ckss cks cks-exam cluster-hardening kubernetes-platforms securing-kubernetes
Language:HTML 467
sektioneins / suhosin
SUHOSIN [수호신] for PHP 5.x - The PHP security extension.
suhosin php hardening
Language:C 467
xen0l / aws-gate
Better AWS SSM Session manager CLI client
aws aws-ssm session-manager cli ec2-instances ec2 aws-ssm-agent ssh access-control iam-access scp ssh-session ssh-support hardening
Language:Python 444
dev-sec / chef-os-hardening
This chef cookbook provides numerous security-related configurations, providing all-round base protection.
hardening devops linux security chef chef-cookbook
Language:Ruby 432
lkrg-org / lkrg
Linux Kernel Runtime Guard
linux kernel security hardening integrity
Language:C 397
gildasio / h2t
h2t (HTTP Hardening Tool) scans a website and suggests security headers to apply
security web-application-security defense hardening http headers
Language:Python 387

hardening

imthenachoman / How-To-Secure-A-Linux-Server

CISOfy / lynis

drduh / YubiKey-Guide

trimstray / the-practical-linux-hardening-guide

prowler-cloud / prowler

dev-sec / ansible-collection-hardening

bunkerity / bunkerweb

hardentools / hardentools

0x6d69636b / windows_hardening

ComplianceAsCode / content

PaulSec / awesome-windows-domain-hardening

konstruktoid / hardening

stampery / mongoaudit

mikeroyal / Windows-11-Guide

GrapheneOS / hardened_malloc

scipag / HardeningKitty

nozaq / terraform-aws-secure-baseline

alichtman / stronghold

simeononsecurity / Windows-Optimize-Harden-Debloat

beerisgood / Windows11_Hardening

grapheneX / grapheneX

dev-sec / ansible-ssh-hardening

dev-sec / linux-baseline

Jsitech / JShielder

jvoisin / snuffleupagus

DenizParlak / Zeus

step-security / harden-runner

konstruktoid / ansible-role-hardening

dev-sec / cis-docker-benchmark

ansible-lockdown / RHEL7-CIS

ibrahimjelliti / CKSS-Certified-Kubernetes-Security-Specialist

sektioneins / suhosin

xen0l / aws-gate

dev-sec / chef-os-hardening

lkrg-org / lkrg

gildasio / h2t