An evolving how-to guide for securing a Linux server.
Repository Index
56,638 visible repositories in the index
1–24 of 46 · Most stars
Community guide to securing and improving privacy on macOS.
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
- security
- compliance
- log-analysis
- vulnerability-detection
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
- security
- security-tools
- security-audit
- security-hardening
Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
- yubikey
- gpg
- gnupg
- ssh
Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
- vuls
- vulnerability-scanners
- golang
- go
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
Sandstorm is a self-hostable web productivity suite. It's implemented as a security-hardened web app package manager.
- capnproto
- decentralized
- sandstorm
- seccomp
A collection of awesome security hardening guides, tools and other resources
- awesome-list
- security
- security-hardening
- security-tools
Open-source tool to enforce privacy & security best-practices on Windows, macOS and Linux, because privacy is sexy
- privacy
- privacy-tools
- privacy-protection
- tweaks-collection
This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
- ansible
- sysctl
- protection
- hardening
Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨
- defender
- firewall-configuration
- harden
- security
Migrate C code to Rust
- transpiler
- rust
- security-hardening
- migration
Free Windows, Mac and Linux cleaner, scanner, and more.
- cleaner
- free
- kudu
- scanner
Soul-driven AI agent with permission-hardened tools, token budgets, and multi-channel access. Runs 24/7 from CLI, Telegram or More.
Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
- malloc
- security
- memory-allocation
- malloc-library
On device Firewall for Coding and Personal Agents
A curated list of awesome Security Hardening techniques for Windows.
AI-ready reference architecture for Angular / ASP.NET Core projects. A hardened foundation with secure authentication, authorization, role and user management, and consistent patterns designed to be safely extended by AI tools. Stop letting AI hallucinate your auth and DB logic - give it a production-grade foundation to build on.
- template-project
- asp-net-core
- angular
- rapid-development
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
- github-actions
- actions
- supply-chain-security
- hardening