security-hardening

There are 74 repositories under security-hardening topic.

imthenachoman / How-To-Secure-A-Linux-Server
An evolving how-to guide for securing a Linux server.
linux hardening hardening-steps security security-hardening server linux-server cc-by-sa
17322
CISOfy / lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
shell linux pci-dss compliance security-audit security-hardening security-scanner security-vulnerability hipaa unix vulnerability-detection vulnerability-scanners vulnerability-assessment devops devops-tools system-hardening hardening auditing gdpr security-tools
Language:Shell 13095
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
vuls vulnerability-scanners golang go linux freebsd vulnerability-detection security security-tools cybersecurity security-vulnerability security-scanner security-hardening security-automation security-audit vulnerability-assessment vulnerability-management vulnerability-scanner vulnerabilities administrator
Language:Go 10926
prowler
prowler-cloud / prowler
Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
aws azure cis-benchmark cloud compliance devsecops forensics gcp gdpr hardening iam multi-cloud python security security-audit security-hardening security-tools well-architected
Language:Python 10641
wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
cloud-security compliance configuration-assessement container-security cybersecurity file-integrity-monitoring incident-response infosec log-analysis malware-detection pci-dss security security-audit security-automation security-hardening security-tools siem vulnerability-detection wazuh xdr
Language:C++ 10527
decalage2 / awesome-security-hardening
A collection of awesome security hardening guides, tools and other resources
awesome-list best-practices blue-team blueteam cis-benchmarks computer-security cyber-security cybersecurity infosec linux-hardening security security-hardening security-tools windows-hardening
5421
undergroundwires / privacy.sexy
Open-source tool to enforce privacy & security best-practices on Windows, macOS and Linux, because privacy is sexy
bloatware bloatware-removal cleanup cybersecurity debloat debloater debotnet domain-driven-design linux macos privacy privacy-protection privacy-tools security security-hardening security-tool security-tools tweaks-collection windows10 windows11
Language:TypeScript 4041
immunant / c2rust
Migrate C code to Rust
memory-safety migration rust security-hardening translation transpiler
Language:Rust 3949
pyllyukko / user.js
user.js -- Firefox configuration hardening
mozilla-firefox privacy firefox security security-hardening mozilla
Language:JavaScript 2751
ComplianceAsCode / content
Security automation content in SCAP, Bash, Ansible, and other formats
security compliance scap xccdf oval cpe cce usgcb pci-dss ospp stig application-security security-tools security-hardening security-automation security-profile hardening information-security cybersecurity ansible
Language:Shell 2169
intika / Librefox
Librefox: Firefox with privacy enhancements
addon android-app android-application anti-fingerprinting browser extensions-firewall firefox free-software freedom libre libre-software libresoftware linux-app mac-app mozilla mozilla-firefox privacy security security-hardening windows-app
Language:JavaScript 1721
HotCakeX / Harden-Windows-Security
Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | Read The Rationale https://github.com/HotCakeX/Harden-Windows-Security/blob/main/Rationale.md
defender firewall-configuration harden powershell-script security security-hardening windows11 powershell bitlocker encryption tpm2 wdac windows windowsdefender applicationcontrol module proactive enterprise-security 1st-party-security operation-system-security
Language:C# 1684
sandboxed-api
google / sandboxed-api
Generate sandboxes for C/C++ libraries automatically
apache-license-2 cplusplus cplusplus-17 sandbox sandboxing sapi security security-hardening
Language:C++ 1658
konstruktoid / hardening
Hardening Ubuntu. Systemd edition.
ubuntu ubuntu-server shell hardening security security-hardening systemd security-tools security-automation security-compliance information-security hacktoberfest
Language:Shell 1363
eliotsykes / rails-security-checklist
:key: Community-driven Rails Security Checklist (see our GitHub Issues for the newest checks that aren't yet in the README)
checklist rails rails-security rails-security-checklist ruby-on-rails security security-audit security-hardening
Language:Ruby 1355
denji / golang-tls
Simple Golang HTTPS/TLS Examples
awesome go golang http2 httpclient https https-server libressl openssl secure security security-audit security-hardening security-scanner security-tools tools
1252
nozaq / terraform-aws-secure-baseline
Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.
terraform aws security security-hardening terraform-modules hardening cis-benchmark aws-auditing security-tools devops terraform-module
Language:HCL 1137
USBGuard / usbguard
USBGuard is a software framework for implementing USB device authorization policies (what kind of USB devices are authorized) as well as method of use policies (how a USB device may interact with the system)
blacklist c-plus-plus hacktoberfest linux rule-language security security-hardening usb usb-devices whitelist
Language:C++ 1119
alichtman / stronghold
Easily configure macOS security settings from the terminal.
macos-setup macos security osx security-hardening hardening command-line-tool command-line
Language:Python 1090
Windows11_Hardening
beerisgood / Windows11_Hardening
a collection about Windows 11
hardening windows10 security-hardening windows-defender defender-credential-guard defender-application-guard security windows11 windows microsoft
1082
blabla1337 / skf-flask
Security Knowledge Framework (SKF) Python Flask / Angular project
owasp-skf secure-by-default secure-coding security security-audit security-framework security-hardening security-knowledge security-requirements security-standards security-training
Language:HTML 810
jvoisin / snuffleupagus
Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!
php7 security hardening c php elephant php-module security-hardening
Language:PHP 767
Jsitech / JShielder
Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark
linux cis-benchmark linux-server hardening ubuntu-server centos7 lamp-stack hardening-steps iptables ubuntu1604 ubuntu1804 security-hardening system-hardening modsecurity lamp-deployer lemp-deployer
Language:PHP 756
appvia / krane
Kubernetes RBAC static analysis & visualisation tool
analysis k8s kubernetes rbac rbac-configuration rbac-management rbac-roles redisgraph role-based-access-control security security-hardening security-scanner security-tools static-analysis visualisation
Language:Ruby 674
wazuh / wazuh-docker
Wazuh - Docker containers
compliance docker elasticsearch file-integrity-management hacktoberfest hacktoberfest-accepted ids incident-response intrusion-detection log-analysis loganalyzer monitoring ossec pci-dss policy-monitoring security security-awareness security-hardening vulnerability-detection wazuh
Language:Shell 674
google / go-safeweb
Secure-by-default HTTP servers in Go.
security-hardening security golang http-server http
Language:Go 667
step-security / harden-runner
Network egress filtering and runtime security for GitHub-hosted and self-hosted runners
github-actions actions supply-chain-security hardening security-hardening runners egress-filtering network-security runtime-security
Language:TypeScript 603
konstruktoid / ansible-role-hardening
Ansible role to apply a security baseline. Systemd edition.
ansible systemd auditd ubuntu centos hardening security security-hardening vagrant openscap information-security security-tools security-compliance debian almalinux hacktoberfest amazon-linux
Language:Jinja 529
ansible-lockdown / RHEL7-CIS
Ansible role for Red Hat 7 CIS Baseline
cis security-hardening rhel7 ansible-role security hardening compliance-automation redhat7 redhat-ansible compliance-as-code redhat security-automation security-tools benchmark benchmark-framework cis-benchmark
Language:YAML 473
FusionAuth / security-scripts
Scripts built from our Guide to User Data Security
security-hardening chef-recipes security fusionauth
Language:Shell 443
cagataycali / xss-listener
🕷️ XSS Listener is a penetration tool for easy to steal data with various XSS.
xss xss-attacks security-hardening security-tools xss-harvest xss-harvester
Language:JavaScript 436
wazuh / wazuh-dashboard-plugins
Plugins for Wazuh Dashboard
wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response gdpr opensearch-dashboards opensearch-plugins
Language:TypeScript 429
PHP-Login-System
msaad1999 / PHP-Login-System
Embeddable and Secure PHP Authentication System with Login, Signup, User Profiles, Profile Editing, Account Verification via Email, Password Reset System, Remember-Me Feature and more.
authentication-framework login-system account-verification php account-activation remember-me password-reset secure csrf-protection header-injection sql-injection-filterer security-hardening profile-editing registration php-login profile-image database profile-page sql profile
Language:PHP 427
slsa-framework / slsa-github-generator
Language-agnostic SLSA provenance generation for Github Actions
security security-hardening security-tools slsa slsaprovenance
Language:Go 417
wazuh / wazuh-ruleset
Wazuh - Ruleset
wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response
Language:Python 417
marshyski / quick-secure
Quickly secure UNIX/Linux systems
linux security security-hardening docker docker-security
Language:Shell 413

security-hardening

imthenachoman / How-To-Secure-A-Linux-Server

CISOfy / lynis

future-architect / vuls

prowler-cloud / prowler

wazuh / wazuh

decalage2 / awesome-security-hardening

undergroundwires / privacy.sexy

immunant / c2rust

pyllyukko / user.js

ComplianceAsCode / content

intika / Librefox

HotCakeX / Harden-Windows-Security

google / sandboxed-api

konstruktoid / hardening

eliotsykes / rails-security-checklist

denji / golang-tls

nozaq / terraform-aws-secure-baseline

USBGuard / usbguard

alichtman / stronghold

beerisgood / Windows11_Hardening

blabla1337 / skf-flask

jvoisin / snuffleupagus

Jsitech / JShielder

appvia / krane

wazuh / wazuh-docker

google / go-safeweb

step-security / harden-runner

konstruktoid / ansible-role-hardening

ansible-lockdown / RHEL7-CIS

FusionAuth / security-scripts

cagataycali / xss-listener

wazuh / wazuh-dashboard-plugins

msaad1999 / PHP-Login-System

slsa-framework / slsa-github-generator

wazuh / wazuh-ruleset

marshyski / quick-secure