An evolving how-to guide for securing a Linux server.
-
Updated
Oct 19, 2024
#
security-hardening
Here are 333 public repositories matching this topic...
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
linux shell auditing devops unix security-audit pci-dss compliance hardening security-vulnerability security-hardening devops-tools hipaa vulnerability-detection vulnerability-scanners security-scanner vulnerability-assessment gdpr security-tools system-hardening
-
Updated
Nov 25, 2025 - Shell
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
security security-audit log-analysis incident-response cybersecurity pci-dss infosec compliance xdr siem security-hardening vulnerability-detection security-automation security-tools wazuh cloud-security malware-detection container-security file-integrity-monitoring configuration-assessement
-
Updated
Dec 11, 2025 - C
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
python aws security security-audit cloud azure iam gcp forensics compliance hardening security-hardening hacktoberfest gdpr multi-cloud security-tools cloudsecurity devsecops cis-benchmark cspm
-
Updated
Dec 10, 2025 - Python
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
go linux golang freebsd security security-audit administrator cybersecurity security-vulnerability vulnerabilities security-hardening vulnerability-detection vulnerability-management vulnerability-scanners security-scanner vulnerability-assessment vuls security-automation security-tools vulnerability-scanner
-
Updated
Dec 9, 2025 - Go
A collection of awesome security hardening guides, tools and other resources
security best-practices cybersecurity infosec awesome-list security-hardening cyber-security computer-security blueteam security-tools blue-team linux-hardening cis-benchmarks windows-hardening
-
Updated
Oct 2, 2024
Open-source tool to enforce privacy & security best-practices on Windows, macOS and Linux, because privacy is sexy
macos linux security privacy domain-driven-design cybersecurity cleanup windows10 bloatware security-hardening tweaks-collection security-tools privacy-protection debloat privacy-tools debotnet security-tool debloater bloatware-removal windows11
-
Updated
Apr 21, 2025 - TypeScript
Migrate C code to Rust
-
Updated
Dec 9, 2025 - Rust
Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨
windows security encryption audit defender compliance security-hardening tpm2 proactive bitlocker firewall-configuration intune harden windowsdefender enterprise-security wdac windows11 applicationcontrol operation-system-security 1st-party-security
-
Updated
Dec 10, 2025 - C#
user.js -- Firefox configuration hardening
-
Updated
Oct 8, 2025 - JavaScript
Security automation content in SCAP, Bash, Ansible, and other formats
security ansible cybersecurity pci-dss application-security compliance scap hardening security-hardening xccdf oval cpe information-security cce usgcb ospp stig security-automation security-tools security-profile
-
Updated
Dec 10, 2025 - Shell
Librefox: Firefox with privacy enhancements
firefox security privacy browser addon freedom mozilla android-application free-software libre mac-app android-app security-hardening linux-app mozilla-firefox windows-app anti-fingerprinting libresoftware libre-software extensions-firewall
-
Updated
Mar 28, 2021 - JavaScript
Generate sandboxes for C/C++ libraries automatically
-
Updated
Oct 16, 2025 - C++
Hardening Ubuntu. Systemd edition.
shell security ubuntu systemd hardening ubuntu-server security-hardening information-security hacktoberfest security-automation security-tools security-compliance
-
Updated
Dec 10, 2025 - Shell
Secure-by-default HTTP servers in Go.
-
Updated
May 30, 2025 - Go
🔑 Community-driven Rails Security Checklist (see our GitHub Issues for the newest checks that aren't yet in the README)
rails checklist security security-audit ruby-on-rails security-hardening rails-security rails-security-checklist
-
Updated
Jul 17, 2022 - Ruby
Simple Golang HTTPS/TLS Examples
go golang security security-audit awesome tools openssl https http2 secure httpclient libressl security-hardening https-server security-scanner security-tools
-
Updated
Nov 20, 2020
USBGuard is a software framework for implementing USB device authorization policies (what kind of USB devices are authorized) as well as method of use policies (how a USB device may interact with the system)
linux security c-plus-plus whitelist blacklist usb security-hardening usb-devices rule-language hacktoberfest
-
Updated
Dec 8, 2025 - C++
a collection about Windows 11
microsoft windows security windows10 hardening security-hardening windows-defender defender-credential-guard defender-application-guard windows11
-
Updated
Feb 23, 2025
Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.
aws security devops terraform hardening security-hardening terraform-modules security-tools cis-benchmark aws-auditing terraform-module
-
Updated
Jul 9, 2024 - HCL
Improve this page
Add a description, image, and links to the security-hardening topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the security-hardening topic, visit your repo's landing page and select "manage topics."