An evolving how-to guide for securing a Linux server.
-
Updated
Jul 13, 2026
#
hardening
Here are 1,327 public repositories matching this topic...
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
linux shell auditing devops unix security-audit pci-dss compliance hardening security-vulnerability security-hardening devops-tools hipaa vulnerability-detection vulnerability-scanners security-scanner vulnerability-assessment gdpr security-tools system-hardening
-
Updated
Aug 5, 2026 - Shell
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment. Connect your agents now and build on the Agentic Cloud Defender.
python aws security security-audit cloud azure iam gcp forensics compliance hardening security-hardening hacktoberfest gdpr multi-cloud security-tools cloudsecurity devsecops cis-benchmark cspm
-
Updated
Aug 18, 2026 - Python
Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
ssh security pgp gnupg yubikey gpg smartcard hardening remote-access rsa-cryptography gpg-agent gpg-configuration
-
Updated
Aug 17, 2026 - HTML
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
letsencrypt docker nginx kubernetes security devops hosting waf reverse-proxy cybersecurity swarm web-security hardening modsecurity dnsbl web-application-firewall devsecops antibot waap security-tuning
-
Updated
Aug 18, 2026 - Python
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
linux checklist security cis guide centos audit manual pci-dss hardening openscap linux-security linux-hardening redhat-enterprise-linux
-
Updated
Nov 19, 2024
This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
linux nginx ansible protection collection playbook role devsec hardening hacktoberfest sysctl ansible-collection os-hardening mysql-hardening ssh-hardening nginx-hardening
-
Updated
Aug 12, 2026 - Jinja
Security automation content in SCAP, Bash, Ansible, and other formats
security ansible cybersecurity pci-dss application-security compliance scap hardening security-hardening xccdf oval cpe information-security cce usgcb ospp stig security-automation security-tools security-profile
-
Updated
Aug 18, 2026 - Shell
HardeningKitty and Windows Hardening Settings
windows checklist security registry cis powershell audit windows-10 windows-server compliance hardening defense stig sisyphus blueteam bsi windows-11 security-baseline windows-hardening
-
Updated
Jul 21, 2026 - PowerShell
Free Windows, Mac and Linux cleaner, scanner, and more.
open-source security performance privacy scanner kudu free hardening cleaner malware-detection system-cleaner windows-cleaner system-maintenance startup-manager pc-optimization linux-cleaner ccleaner-alternative mac-cleaner
-
Updated
Aug 18, 2026 - TypeScript
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
security memory memory-allocator malloc hardening memory-allocation quarantine malloc-library slab-allocator grapheneos
-
Updated
Aug 13, 2026 - C
Hardening Ubuntu. Systemd edition.
shell security ubuntu systemd hardening ubuntu-server security-hardening information-security hacktoberfest security-automation security-tools security-compliance
-
Updated
Aug 17, 2026 - Shell
HardeningKitty - Checks and hardens your Windows configuration
windows checklist security registry powershell audit windows-10 windows-server hardening defense blueteam
-
Updated
Jul 21, 2026 - PowerShell
Windows 10/11 Guide. Including Windows Security tools, Encryption, Nextcloud, Graphics, Gaming, Virtualization, Windows Subsystem for Linux (WSL 2), Software Apps, and Resources.
gaming uwp optimization nextcloud active-directory tweaks visual-studio-code wsl windows-subsystem-linux windows-desktop windows10 hardening privacy-protection debloat windows-defender windows-11 windows-terminal winui winui3 windows11
-
Updated
Jun 27, 2025 - C#
Enhance the security and privacy of your Windows 10 and Windows 11 deployments with our fully optimized, hardened, and debloated script. Adhere to industry best practices and Department of Defense STIG/SRG requirements for optimal performance and security.
microsoft windows security automation privacy telemetry windows-10 windows-desktop windows10 hardening cyber mitigations debloat harden windows-defender debotnet stig-compliant stigs hardware-requirements privacy-script
-
Updated
Apr 25, 2025 - PowerShell
🔥 A powerful MongoDB auditing and pentesting tool 🔥
-
Updated
Apr 17, 2023 - Python
a collection about Windows 11
microsoft windows security windows10 hardening security-hardening windows-defender defender-credential-guard defender-application-guard windows11
-
Updated
Feb 23, 2025
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
actions hardening security-hardening egress-filtering network-security runners runtime-security github-actions supply-chain-security
-
Updated
Aug 15, 2026 - TypeScript
Improve this page
Add a description, image, and links to the hardening topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the hardening topic, visit your repo's landing page and select "manage topics."