A collection of awesome security hardening guides, best practices, checklists, benchmarks, tools and other resources. This is work in progress: please contribute by sending your suggestions. You may do this by creating issue tickets or forking, editing and sending pull requests. You may also send suggestions on Twitter to @decalage2, or use https://www.decalage.info/contact

• Security Hardening Guides and Best Practices
  • Hardening Guide Collections
  • GNU/Linux
    • Red Hat Enterprise Linux - RHEL
    • CentOS
    • SUSE
    • Ubuntu
  • Windows
  • macOS
  • Network Devices
    • Switches
    • Routers
    • IPv6
    • Firewalls
  • Virtualization - VMware
  • Containers - Docker - Kubernetes
  • Services
    • SSH
    • TLS/SSL
    • Web Servers
      • Apache HTTP Server
      • Apache Tomcat
      • Eclipse Jetty
      • Microsoft IIS
    • Mail Servers
    • FTP Servers
    • Database Servers
    • Active Directory
    • ADFS
    • Kerberos
    • LDAP
    • DNS
    • NTP
    • NFS
    • CUPS
  • Authentication - Passwords
  • Hardware - CPU - BIOS - UEFI
  • Cloud
• Tools
  • Tools to check security hardening
    • GNU/Linux
    • Windows
    • Network Devices
    • TLS/SSL
    • SSH
    • Hardware - CPU - BIOS - UEFI
    • Docker
    • Cloud
    • DNS
  • Tools to apply security hardening
    • GNU/Linux
    • Windows
    • TLS/SSL
    • Cloud
  • Password Generators
• Books
• Other Awesome Lists
  • Other Awesome Security Lists

• CIS Benchmarks (registration required)
• ANSSI Guides
• NSA Cybersecurity Advisories & Guidance
• NSA Cybersecurity Resources for Cybersecurity Professionals and NSA Cybersecurity publications
• US DoD DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs)
• OpenSCAP Security Policies
• Australian Cyber Security Center Publications
• FIRST Best Practice Guide Library (BPGL)
• Harden the World - a collection of hardening guidelines for devices, applications and OSs (mostly Apple for now).

• ANSSI - Configuration recommendations of a GNU/Linux system - version 2.0, 2022
• CIS Benchmark for Distribution Independent Linux - 2019, archived
• trimstray - The Practical Linux Hardening Guide