An evolving how-to guide for securing a Linux server.

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Guide to using YubiKey for GPG and SSH

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

Prowler is an Open Source Security tool for AWS, Azure and GCP to perform Cloud Security best practices assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more.

This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL

🛡️ Make your web services secure by default !

Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.

HardeningKitty and Windows Hardening settings and configurations

Security automation content in SCAP, Bash, Ansible, and other formats

A curated list of awesome Security Hardening techniques for Windows.

🔥 A powerful MongoDB auditing and pentesting tool 🔥

Hardening Ubuntu. Systemd edition.

Windows 10/11 Guide. Including Windows Security tools, Encryption, Nextcloud, Graphics, Gaming, Virtualization, Windows Subsystem for Linux (WSL 2), Software Apps, and Resources.

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability / integration over time.

Easily configure macOS security settings from the terminal.

HardeningKitty - Checks and hardens your Windows configuration

a collection about Windows 11

Enhance the security and privacy of your Windows 10 and Windows 11 deployments with our fully optimized, hardened, and debloated script. Adhere to industry best practices and Department of Defense STIG/SRG requirements for optimal performance and security.