security-hardening

There are 77 repositories under security-hardening topic.

imthenachoman / How-To-Secure-A-Linux-Server
An evolving how-to guide for securing a Linux server.
linux hardening hardening-steps security security-hardening server linux-server cc-by-sa
19506
CISOfy / lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
shell linux pci-dss compliance security-audit security-hardening security-scanner security-vulnerability hipaa unix vulnerability-detection vulnerability-scanners vulnerability-assessment devops devops-tools system-hardening hardening auditing gdpr security-tools
Language:Shell 14645
wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
security compliance log-analysis vulnerability-detection cybersecurity file-integrity-monitoring infosec malware-detection cloud-security container-security security-automation security-tools siem xdr configuration-assessement incident-response pci-dss security-audit security-hardening wazuh
Language:C 13479
prowler
prowler-cloud / prowler
Prowler is the Open Cloud Security platform for AWS, Azure, GCP, Kubernetes, M365 and more. It helps for continuous monitoring, security assessments & audits, incident response, compliance, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, ENS and more
security security-tools security-audit security-hardening hardening aws cis-benchmark compliance gdpr forensics cloud well-architected devsecops azure iam python gcp multi-cloud cspm cloudsecurity
Language:Python 12101
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
vuls vulnerability-scanners golang go linux freebsd vulnerability-detection security security-tools cybersecurity security-vulnerability security-scanner security-hardening security-automation security-audit vulnerability-assessment vulnerability-management vulnerability-scanner vulnerabilities administrator
Language:Go 11739
decalage2 / awesome-security-hardening
A collection of awesome security hardening guides, tools and other resources
awesome-list security security-hardening security-tools windows-hardening cybersecurity cyber-security infosec best-practices cis-benchmarks blueteam blue-team computer-security linux-hardening
5923
undergroundwires / privacy.sexy
Open-source tool to enforce privacy & security best-practices on Windows, macOS and Linux, because privacy is sexy
privacy privacy-tools privacy-protection tweaks-collection domain-driven-design security-tools security-hardening bloatware-removal bloatware debotnet cleanup debloater debloat windows10 macos linux windows11 cybersecurity security security-tool
Language:TypeScript 4986
immunant / c2rust
Migrate C code to Rust
transpiler rust security-hardening migration translation memory-safety
Language:Rust 4469
pyllyukko / user.js
user.js -- Firefox configuration hardening
firefox mozilla mozilla-firefox privacy security security-hardening
Language:JavaScript 2793
ComplianceAsCode / content
Security automation content in SCAP, Bash, Ansible, and other formats
security compliance scap xccdf oval cpe cce usgcb pci-dss ospp stig application-security security-tools security-hardening security-automation security-profile hardening information-security cybersecurity ansible
Language:Shell 2531
HotCakeX / Harden-Windows-Security
Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | Read The Rationale https://github.com/HotCakeX/Harden-Windows-Security/blob/main/Rationale.md
1st-party-security applicationcontrol bitlocker defender encryption enterprise-security firewall-configuration harden module operation-system-security powershell powershell-script proactive security security-hardening tpm2 wdac windows windows11 windowsdefender
Language:C# 2360
intika / Librefox
Librefox: Firefox with privacy enhancements
privacy security anti-fingerprinting security-hardening mozilla-firefox mozilla firefox addon extensions-firewall free-software freedom libre libresoftware libre-software linux-app mac-app android-application android-app windows-app browser
Language:JavaScript 1765
sandboxed-api
google / sandboxed-api
Generate sandboxes for C/C++ libraries automatically
sandboxing sandbox security security-hardening cplusplus-17 cplusplus apache-license-2 sapi
Language:C++ 1713
google / go-safeweb
Secure-by-default HTTP servers in Go.
security-hardening security golang http-server http
Language:Go 1483
konstruktoid / hardening
Hardening Ubuntu. Systemd edition.
ubuntu ubuntu-server shell hardening security security-hardening systemd security-tools security-automation security-compliance information-security hacktoberfest
Language:Shell 1483
eliotsykes / rails-security-checklist
:key: Community-driven Rails Security Checklist (see our GitHub Issues for the newest checks that aren't yet in the README)
checklist rails-security rails rails-security-checklist ruby-on-rails security-audit security-hardening security
Language:Ruby 1363
denji / golang-tls
Simple Golang HTTPS/TLS Examples
http2 https-server https httpclient golang go openssl libressl awesome tools security-hardening security-tools security-audit security-scanner secure security
1319
Windows11_Hardening
beerisgood / Windows11_Hardening
a collection about Windows 11
hardening windows10 security-hardening windows-defender defender-credential-guard defender-application-guard security windows11 windows microsoft
1254
USBGuard / usbguard
USBGuard is a software framework for implementing USB device authorization policies (what kind of USB devices are authorized) as well as method of use policies (how a USB device may interact with the system)
usb usb-devices c-plus-plus rule-language security security-hardening whitelist blacklist linux hacktoberfest
Language:C++ 1250
nozaq / terraform-aws-secure-baseline
Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.
terraform aws security security-hardening terraform-modules hardening cis-benchmark aws-auditing security-tools devops terraform-module
Language:HCL 1183
alichtman / stronghold
Easily configure macOS security settings from the terminal.
macos-setup macos security osx security-hardening hardening command-line-tool command-line
Language:Python 1143
wazuh / wazuh-docker
Wazuh - Docker containers
wazuh docker ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch security-hardening log-analysis ids pci-dss file-integrity-management security-awareness vulnerability-detection incident-response hacktoberfest hacktoberfest-accepted
Language:Shell 906
step-security / harden-runner
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
github-actions actions supply-chain-security hardening security-hardening runners egress-filtering network-security runtime-security
Language:TypeScript 877
blabla1337 / skf-flask
Security Knowledge Framework (SKF) Python Flask / Angular project
owasp-skf secure-by-default secure-coding security security-audit security-framework security-hardening security-knowledge security-requirements security-standards security-training
Language:HTML 818
jvoisin / snuffleupagus
Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!
php7 security hardening c php elephant php-module security-hardening
Language:PHP 818
Jsitech / JShielder
Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark
linux cis-benchmark linux-server hardening ubuntu-server centos7 lamp-stack hardening-steps iptables ubuntu1604 ubuntu1804 security-hardening system-hardening modsecurity lamp-deployer lemp-deployer
Language:PHP 779
appvia / krane
Kubernetes RBAC static analysis & visualisation tool
kubernetes rbac analysis visualisation redisgraph static-analysis rbac-configuration rbac-roles rbac-management k8s role-based-access-control security-tools security-scanner security security-hardening
Language:Ruby 727
konstruktoid / ansible-role-hardening
Ansible role to apply a security baseline. Systemd edition.
ansible systemd auditd ubuntu centos hardening security security-hardening vagrant openscap information-security security-tools security-compliance debian almalinux hacktoberfest amazon-linux
Language:Jinja 596
Anon-Planet / thgtoa
The comprehensive guide for online anonymity and OpSec.
activism anonymity anonymity-enhancement anonymization privacy privacy-enhancing-technologies privacy-online privacy-protection qubes-os security security-hardening tor whonix linux macos privacy-tools tails veracrypt windows opsec
Language:HTML 531
wazuh / wazuh-dashboard-plugins
Plugins for Wazuh Dashboard
wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response gdpr opensearch-dashboards opensearch-plugins
Language:TypeScript 485
wazuh / wazuh-ruleset
Wazuh - Ruleset
wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response
Language:Python 479
slsa-framework / slsa-github-generator
Language-agnostic SLSA provenance generation for Github Actions
security security-hardening security-tools slsa slsaprovenance
Language:Go 460
FusionAuth / security-scripts
Scripts built from our Guide to User Data Security
security-hardening chef-recipes security fusionauth
Language:Shell 445
PHP-Login-System
msaad1999 / PHP-Login-System
Embeddable and Secure PHP Authentication System with Login, Signup, User Profiles, Profile Editing, Account Verification via Email, Password Reset System, Remember-Me Feature and more.
authentication-framework login-system account-verification php account-activation remember-me password-reset secure csrf-protection header-injection sql-injection-filterer security-hardening profile-editing registration php-login profile-image database profile-page sql profile
Language:PHP 443
cagataycali / xss-listener
🕷️ XSS Listener is a penetration tool for easy to steal data with various XSS.
security-hardening security-tools xss xss-attacks xss-harvest xss-harvester
Language:JavaScript 435
marshyski / quick-secure
Quickly secure UNIX/Linux systems
linux security security-hardening docker docker-security
Language:Shell 417

security-hardening

imthenachoman / How-To-Secure-A-Linux-Server

CISOfy / lynis

wazuh / wazuh

prowler-cloud / prowler

future-architect / vuls

decalage2 / awesome-security-hardening

undergroundwires / privacy.sexy

immunant / c2rust

pyllyukko / user.js

ComplianceAsCode / content

HotCakeX / Harden-Windows-Security

intika / Librefox

google / sandboxed-api

google / go-safeweb

konstruktoid / hardening

eliotsykes / rails-security-checklist

denji / golang-tls

beerisgood / Windows11_Hardening

USBGuard / usbguard

nozaq / terraform-aws-secure-baseline

alichtman / stronghold

wazuh / wazuh-docker

step-security / harden-runner

blabla1337 / skf-flask

jvoisin / snuffleupagus

Jsitech / JShielder

appvia / krane

konstruktoid / ansible-role-hardening

Anon-Planet / thgtoa

wazuh / wazuh-dashboard-plugins

wazuh / wazuh-ruleset

slsa-framework / slsa-github-generator

FusionAuth / security-scripts

msaad1999 / PHP-Login-System

cagataycali / xss-listener

marshyski / quick-secure