hardening

YubiKey-Guide

+536

Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

kudu

+82

Free Windows, Mac and Linux cleaner, scanner, and more.

How-To-Secure-A-Linux-Server

+159

An evolving how-to guide for securing a Linux server.

bunkerweb

+43

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

prowler

+42

This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.

CISOfy/lynis

+58

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

ansible-collection-hardening

+14

This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL

hardened_malloc

+8

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.

harden-runner

+4

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.