Repository Index

An evolving how-to guide for securing a Linux server.

• linux
• hardening
• hardening-steps
• security

Community guide to securing and improving privacy on macOS.

• apple
• macos
• security
• privacy

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

• security
• compliance
• log-analysis
• vulnerability-detection

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

• shell
• linux
• pci-dss
• compliance

This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.

• security
• security-tools
• security-audit
• security-hardening

Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

• yubikey
• gpg
• gnupg
• ssh

Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening

• privacy
• firefox
• security
• settings

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

• vuls
• vulnerability-scanners
• golang
• go

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

• nginx
• modsecurity
• docker
• security

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

• linux
• linux-hardening
• linux-security
• security

A collection of awesome security hardening guides, tools and other resources

• awesome-list
• security
• security-hardening
• security-tools

This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL

• ansible
• sysctl
• protection
• hardening

Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.

• windows
• security
• hardening

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.

• malloc
• security
• memory-allocation
• malloc-library

A curated list of awesome Security Hardening techniques for Windows.

• windows
• hardening
• security

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

• github-actions
• actions
• supply-chain-security
• hardening

Easily configure macOS security settings from the terminal.

• macos-setup
• macos
• security
• osx

Best Current Practices regarding secure online communication and configuration of services using cryptography.

• cryptography
• applied-cryptography
• documentation
• best-practices

Security Auditor Utility for GraphQL APIs

• security
• penetration-testing
• auditing
• graphql

Conveniently and reasonably harden NixOS.

• nix
• nixos
• privacy
• security

Harden a rooted LG webOS TV: neutralise microphones, the remote-mic voice pipeline and the screen-capture leak; block ad/telemetry/ACR endpoints (dual-stack); decline LG consents; hide ad apps; debloat. Reversible + boot-persistent.

• lg-tv
• adblock
• hardening
• privacy

Quickly secure UNIX/Linux systems

• linux
• security
• security-hardening
• docker

The second generation Android Hardening Protection

Android Mobile Device Hardening

• forensic
• security
• hardening
• android-security