An evolving how-to guide for securing a Linux server.
Updated Mar 17, 2019
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
Updated Mar 4, 2019
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27…
AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of th…
Hardentools is a utility that disables a number of risky Windows features.
This Ansible role provides numerous security-related configurations, providing all-round base protection.
🔥 A powerful MongoDB auditing and pentesting tool 🔥
Python
Updated Apr 2, 2018
A curated list of awesome Security Hardening techniques for Windows.
Updated Nov 11, 2018
Security compliance content in SCAP, Bash, Ansible, and other formats
AWS Auditing & Hardening Tool
Shell
Updated Jun 7, 2018
This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.
Ruby
Updated Mar 20, 2019
SUHOSIN - 수호신 - The PHP security extension.
C
Updated Jul 8, 2017
Easily configure macOS security settings from the terminal.
Hardening Ubuntu. Systemd edition.
Shell
Updated Mar 8, 2019
This chef cookbook provides numerous security-related configurations, providing all-round base protection.
DevSec Linux Baseline - InSpec Profile
Ruby
Updated Mar 7, 2019
Security module for php7 - Killing bugclasses and virtual-patching the rest!
HardenedBSD development tree.
This puppet module provides numerous security-related configurations, providing all-round base protection.
Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer
CIS Docker Benchmark - InSpec Profile
Ruby
Updated Oct 23, 2018
Reproducible curl/libcurl (and OpenSSL) binaries for Windows
Shell
Updated Mar 21, 2019
Blue Team Scripts
Shell
Updated Mar 12, 2018
This chef cookbook provides secure ssh-client and ssh-server configurations.
Ruby
Updated Mar 20, 2019
This Ansible role provides secure nginx configurations.
Ruby
Updated Dec 27, 2018
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externa…
C
Updated Mar 20, 2019
DevSec SSH Baseline - InSpec Profile
This Ansible role provides security configuration for MySQL.
Suhosin Extension for PHP 7.x
C
Updated Aug 22, 2018
Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services F…
HCL
Updated Feb 11, 2019