Skip to content
#

hardening

Star

Here are 295 public repositories matching this topic...

Language: All
Filter by language
All 295 Shell 70 Ruby 42 Python 36 PowerShell 17 C 14 HTML 12 PHP 10 Jinja 9 JavaScript 8 Go 7
Sort: Best match
Sort options
Best match Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

CISOfy / lynis

Star 9.3k

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

linux shell auditing devops unix security-audit pci-dss compliance hardening security-vulnerability security-hardening devops-tools hipaa vulnerability-detection vulnerability-scanners security-scanner vulnerability-assessment gdpr security-tools system-hardening
  • Updated Jan 25, 2022
  • Shell
prowler

prowler-cloud / prowler

Star 4.8k

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 200 controls covering CIS, ISO27001, GDPR, HIPAA, SOC2, ENS and other security frameworks.

aws security cis security-audit cloud aws-cli assessment forensics compliance hardening security-hardening hipaa cloudtrail hacktoberfest gdpr security-tools devsecops cis-benchmark aws-auditing well-architected
  • Updated Jan 24, 2022
  • Shell

ComplianceAsCode / content

Star 1.5k
Find more good first issues

lunasec-io / lunasec

Sponsor
Star 811

LunaSec - Open Source Security Software built by Security Engineers. Scan your dependencies for Log4Shell, or add Data Tokenization to prevent data leaks. Try our live Tokenizer demo: https://app.lunasec.dev

security privacy dependency-analysis pci-dss web-security compliance hardening scanning immutable-database tokenization gdpr devsecops zero-trust soc2 data-anonymization privacy-by-design log4shell
  • Updated Jan 23, 2022
  • TypeScript

jvoisin / snuffleupagus

Star 551
Open

Add a `notowner_exec` statement to prevent the execution of owned PHP files

1
WhiteWinterWolf
WhiteWinterWolf commented May 1, 2021

I'm not confident in the security brought by the readonly_exec statement.

In the classical *nix DAC model, it is expected for unprivileged users to be able to change the write permission flag on files they own. Therefore, Snuffleupagus readonly_exec statement only relies on the hope that an attacker won't find a way to rely on this standard mechanism to prevent the execution of arbitrary

Read more
enhancement question good first issue feature
Find more good first issues

Improve this page

Add a description, image, and links to the hardening topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the hardening topic, visit your repo's landing page and select "manage topics."

Learn more