An evolving how-to guide for securing a Linux server.

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls listed here https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf and more than 100 additional checks that help on GDPR, HIPAA and other security requirements.

This Ansible role provides numerous security-related configurations, providing all-round base protection.

Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.

A curated list of awesome Security Hardening techniques for Windows.

🔥 A powerful MongoDB auditing and pentesting tool 🔥

Security automation content in SCAP, OSCAL, Bash, Ansible, and other formats

Easily configure macOS security settings from the terminal.

This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.

Automated System Hardening Framework

AWS Auditing & Hardening Tool

Hardening Ubuntu. Systemd edition.

SUHOSIN [수호신] for PHP 5.x - The PHP security extension.

DevSec Linux Baseline - InSpec Profile

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations.

Security module for php7 - Killing bugclasses and virtual-patching the rest!

This chef cookbook provides numerous security-related configurations, providing all-round base protection.

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability / integration over time.

CIS Docker Benchmark - InSpec Profile

Reproducible curl/libcurl (and OpenSSL) binaries for Windows

HardenedBSD development tree.

h2t (HTTP Hardening Tool) scans a website and suggests security headers to apply

This puppet module provides numerous security-related configurations, providing all-round base protection.

Better AWS SSM Session manager CLI client

Blue Team Scripts

This Ansible role provides secure nginx configurations.

DevSec SSH Baseline - InSpec Profile