57,138 visible repositories in the index
25–47 of 47 · Most stars
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
Easily configure macOS security settings from the terminal.
Microserver is a Java 8 native, zero configuration, standards based, battle hardened library to run Java Rest Microservices via a standard Java main class. Supporting pure Microservice or Micro-monolith styles.
Security Auditor Utility for GraphQL APIs
Best Current Practices regarding secure online communication and configuration of services using cryptography.
Conveniently and reasonably harden NixOS.
Harden a rooted LG webOS TV: neutralise microphones, the remote-mic voice pipeline and the screen-capture leak; block ad/telemetry/ACR endpoints (dual-stack); decline LG consents; hide ad apps; debloat. Reversible + boot-persistent.
Quickly secure UNIX/Linux systems
The second generation Android Hardening Protection
A battle hardened testing framework for C# that's heavily inspired by Mocha and RSpec.
Android Mobile Device Hardening
Gixy-Next: NGINX Configuration Security Scanner & Performance Checker
Custom build of ida-pro-mcp - stability-hardened MCP server for hosting headless IDA Pro instances
🔍 Function-level tracing tool for Seccomp profiling, with eBPF
TranslatedAndroid and iOS app hardening
Harden Your Security Headers For Vapor
Automated Office 365 and Windows 10/11 setup utility with validation checks
Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance
Simple, perfect setup of a Linux machine via Ansible
Security-hardened MCP server for Docker with read-only defaults, restart deny-lists, and secret redaction
Ansible Collection of roles, playbooks & plugins for Linux-based cloud infrastructure. Covers OS hardening, MariaDB, Icinga2, Nextcloud, FreeIPA, KVM & more. Bitwarden & Cloud integration.
Audit and fix your Mac's security in one command. No agent, no signup, open source.
Cross-compile the Linux kernel for Raspberry Pi with enhanced security in a single command.