An evolving how-to guide for securing a Linux server.
Repository Index
47,133 repositories indexed
1–21 of 21 · Most stars
Community guide to securing and improving privacy on macOS.
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
A curated list of awesome Security Hardening techniques for Windows.
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
Easily configure macOS security settings from the terminal.
Security Auditor Utility for GraphQL APIs
Conveniently and reasonably harden NixOS.
Harden a rooted LG webOS TV: neutralise microphones, the remote-mic voice pipeline and the screen-capture leak; block ad/telemetry/ACR endpoints (dual-stack); decline LG consents; hide ad apps; debloat. Reversible + boot-persistent.
Android Mobile Device Hardening
Gixy-Next: NGINX Configuration Security Scanner & Performance Checker
🔍 Function-level tracing tool for Seccomp profiling, with eBPF
Ansible Collection of roles, playbooks & plugins for Linux-based cloud infrastructure. Covers OS hardening, MariaDB, Icinga2, Nextcloud, FreeIPA, KVM & more. Bitwarden & Cloud integration.
Audit and fix your Mac's security in one command. No agent, no signup, open source.