An evolving how-to guide for securing a Linux server.
Repository Index
47,133 repositories indexed
1–24 of 30 · Most stars
Community guide to securing and improving privacy on macOS.
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
A collection of awesome security hardening guides, tools and other resources
This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
A curated list of awesome Security Hardening techniques for Windows.
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
Easily configure macOS security settings from the terminal.
Best Current Practices regarding secure online communication and configuration of services using cryptography.
Security Auditor Utility for GraphQL APIs
Conveniently and reasonably harden NixOS.
Harden a rooted LG webOS TV: neutralise microphones, the remote-mic voice pipeline and the screen-capture leak; block ad/telemetry/ACR endpoints (dual-stack); decline LG consents; hide ad apps; debloat. Reversible + boot-persistent.
Quickly secure UNIX/Linux systems
The second generation Android Hardening Protection
Android Mobile Device Hardening