hardenrun / aif
On device Firewall for Coding and Personal Agents
hardenrun / aif
SivaSaiKrishnaSuryadevara / docker-mcp-guardian
Security-hardened MCP server for Docker with read-only defaults, restart deny-lists, and secret redaction
chaseai-yt / claudex-loop
Claude Code skill: four-phase plan hardening (recon, interrogate, Codex adversarial review, cross-model build & inspection) β two AI models harden your plan before a line of code exists, then swap jobs to build it. Whoever built it never grades it.
syhunt / php2shell-protection
Emergency Apache mitigation and testing toolkit for php2shell (CVE-2026-109618 / CVE-2026-109619), featuring multipart POST blocking, request-size limits, and additional hardening measures.
AdventDevInc / kudu
Free Windows, Mac and Linux cleaner, scanner, and more.
wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
bunkerity / bunkerweb
π‘οΈ Open-source and cloud-native Web Application Firewall (WAF)
prowler-cloud / prowler
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the worldβs most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
kairowan / Shellsmith
Android δΈ iOS εΊη¨ε εΊε·₯ε · Β· Android and iOS app hardening
HardeNNN / UniForge3D-Low-VRAM
β
drduh / YubiKey-Guide
Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
wuyhong715 / rikkahub-agent-pure
RikkaHub Agent Β· Pure β an Android AI agent that survives long runs. Independent hardening pass on the rikkahub on-device agent: usage ledger & budgets, on-demand tools, expert sub-agents, cold memory, chained workflows. Kotlin/Compose, Shizuku/Termux/MCP. QQ group 1030362371.
e2sy / jailbreak-archives
A structured, versioned archive of adversarial prompt engineering techniques against Large Language Models β for AI safety research, red-teaming, and defensive hardening.
cosmicstack-labs / mercury-agent
Soul-driven AI agent with permission-hardened tools, token budgets, and multi-channel access. Runs 24/7 from CLI, Telegram or More.
GrapheneOS / Vanadium
Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS repositories and doesn't include patches not relevant to the build targets used on GrapheneOS.
ChaoticSi1ence / SlimBrave-Neo
Debloat and harden Brave Browser on Linux, macOS, and Windows using Chromium enterprise policies. Curses TUI on Linux/macOS, native GUI on Windows. 79 policies, 6 presets, zero dependencies.
drduh / macOS-Security-and-Privacy-Guide
Community guide to securing and improving privacy on macOS.
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
immunant / c2rust
Migrate C code to Rust
HotCakeX / Harden-Windows-Security
Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Storeβ¨
GrapheneOS / hardened_malloc
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
runzhliu / deepseek-harness-docker
Community Docker and Kubernetes packaging for DeepSeek Harness (@deepseek-ai/dsh), with a hardened image, Compose stack, Helm chart, Web UI, and headless CLI.
step-security / harden-runner
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
xqzme69 / A2MBA-LLVM
LLVM 21 pass plugin for AΒ²MBA architectural and anti-generalization hardening of mixed Boolean-arithmetic expressions.
hardenedlinux / SonicBoom
A compiler-first PyTorch alternative. MLIR-based Boom IR, Guile scripting, CUDA and CPU. On consumer GPUs it already beats llama.cppβs LLM decode with the same kernels; the compiler makes the difference. GPLv3.
ComplianceAsCode / content
Security automation content in SCAP, Bash, Ansible, and other formats
google / sandboxed-api
Generate sandboxes for C/C++ libraries automatically
ovh / debian-cis
PCI-DSS compliant Debian 12/13 hardening
jvoisin / snuffleupagus
Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!
roddhjav / apparmor.d
Full set of AppArmor policies
GrapheneOS / platform_manifest
Repo manifest for the GrapheneOS mobile privacy and security hardening project.
ffyfox / dsh-prompt-hardener
DSH ζδ»ΆοΌζζη€Ίθ―ζΉεζγ瑬ι¦ι¦γι£ζ ΌεδΊ€η»ζ¨‘εοΌζζ¦ηζει¨ε樑ε葨η°
decalage2 / awesome-security-hardening
A collection of awesome security hardening guides, tools and other resources
dev-sec / ansible-collection-hardening
This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
beerisgood / Windows11_Hardening
a collection about Windows 11
cloud-gouv / securix
SΓ©curixOS is a NixOS-based secure operating system tailored for small to medium-sized teams. It provides a minimal, hardened environment with strong isolation, reproducibility, and policy-driven configurations to ensure operational security and compliance.
endojs / endo
Endo is a distributed secure JavaScript sandbox, based on SES
Normation / rudder
Rudder is a configuration and security automation platform. Manage your Cloud, hybrid or on-premises infrastructure in a simple, scalable and dynamic way.
ernw / hardening
Repository of Hardening Guides
cynicsketch / nix-mineral
Conveniently and reasonably harden NixOS.
bytedance / vArmor
vArmor is a cloud-native container hardening system that leverages AppArmor/BPF/Seccomp and NetworkProxy technologies to enforce access control from system calls to application protocols β protecting workloads including AI Agents.
WMAL / kodachios
Kodachi OS is a Debian-based privacy & security OS by Warith Al Maawali, built for uncompromising privacy, anonymity, and reliability. It pairs hardened defaults with a curated toolkit for private browsing, advanced networking, and incident response, all in an intuitive interface.
sparr-sherrya / hlocation-release
HLocation hardened builds and signed verification files
konstruktoid / hardening
Hardening Ubuntu. Systemd edition.
wazuh / wazuh-docker
Wazuh - Docker containers
aws-samples / hardeneks
Runs checks to see if an EKS cluster follows EKS Best Practices.
appvia / krane
Kubernetes RBAC static analysis & visualisation tool
konstruktoid / ansible-role-hardening
Ansible role to apply a security baseline. Systemd edition.
lkrg-org / lkrg
Linux Kernel Runtime Guard
openclaw / openclaw-ansible
Automated, hardened Clawdbot installation with Tailscale VPN, UFW firewall, and Docker isolation
Kicksecure / security-misc
Miscellaneous Linux security hardening settings for Kicksecure and derivatives
rtvkiz / minimal
Minimal CVE Hardened container image collection
wazuh / wazuh-dashboard-plugins
Plugins for Wazuh Dashboard
armourinfosec / Enterprise-Windows-Infrastructure-Security
An Obsidian-based knowledge base for Windows Server administration and defensive hardening.
armourinfosec / Linux-Administration-and-Server-Hardening
Lab-driven, dual-distro (CentOS Stream 10 / Debian 12) Linux Administration & Server Hardening course β 29 modules, 20 labs, 10 enterprise projects, RHCSA/LFCS-aligned.
seyimusibau-cyber / hardenerAi
Hardener Plus is an advanced security auditing platform for modern web architectures. It employs dynamic profiling and deep heuristics to detect complex vulnerabilities, logical bypasses, and injection points that basic scanners miss. It also provides URL pulse checks, automated patching, and CI/CD integration.
armourinfosec / Secure-WordPress-Administration
Open-source, lab-driven study notes for building, administering, hardening, and operating WordPress at scale β 28 modules across install, content, security, performance, and DevOps (CC BY 4.0).
KBT096 / windows-secure-toolkit
Local Windows security auditing and reversible hardening with a C#/.NET Framework 4.8 core and CMD/BAT entry points.
jimididit / koncreet
First-hour hardening toolkit for a new Linux VPS.
OrbSec / satellite
Orb44 Watch satellite - inside pulse from your VPS (load, listeners, hardening).