drduh / macOS-Security-and-Privacy-Guide
Community guide to securing and improving privacy on macOS.
drduh / macOS-Security-and-Privacy-Guide
wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
prowler-cloud / prowler
Prowler is the worldβs most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
drduh / YubiKey-Guide
Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
bunkerity / bunkerweb
π‘οΈ Open-source and cloud-native Web Application Firewall (WAF)
decalage2 / awesome-security-hardening
A collection of awesome security hardening guides, tools and other resources
dev-sec / ansible-collection-hardening
This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
immunant / c2rust
Migrate C code to Rust
HotCakeX / Harden-Windows-Security
Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Storeβ¨
AdventDevInc / kudu
Free Windows, Mac and Linux cleaner, scanner, and more.
chaseai-yt / claudex-loop
Claude Code skill: four-phase plan hardening (recon, interrogate, Codex adversarial review, cross-model build & inspection) β two AI models harden your plan before a line of code exists, then swap jobs to build it. Whoever built it never grades it.
ComplianceAsCode / content
Security automation content in SCAP, Bash, Ansible, and other formats
kubearmor / KubeArmor
Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).
GrapheneOS / Vanadium
Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS repositories and doesn't include patches not relevant to the build targets used on GrapheneOS.
GrapheneOS / hardened_malloc
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.
konstruktoid / hardening
Hardening Ubuntu. Systemd edition.
google / sandboxed-api
Generate sandboxes for C/C++ libraries automatically
stackrox / stackrox
The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides recommendations to proactively improve security by hardening the environment.
beerisgood / Windows11_Hardening
a collection about Windows 11
step-security / harden-runner
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
wazuh / wazuh-docker
Wazuh - Docker containers
subat0mik / Misconfiguration-Manager
Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.
ovh / debian-cis
PCI-DSS compliant Debian 12/13 hardening
jvoisin / snuffleupagus
Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!
roddhjav / apparmor.d
Full set of AppArmor policies
ChaoticSi1ence / SlimBrave-Neo
Debloat and harden Brave Browser on Linux, macOS, and Windows using Chromium enterprise policies. Curses TUI on Linux/macOS, native GUI on Windows. 79 policies, 6 presets, zero dependencies.
appvia / krane
Kubernetes RBAC static analysis & visualisation tool
Normation / rudder
Rudder is a configuration and security automation platform. Manage your Cloud, hybrid or on-premises infrastructure in a simple, scalable and dynamic way.
ernw / hardening
Repository of Hardening Guides
konstruktoid / ansible-role-hardening
Ansible role to apply a security baseline. Systemd edition.
lkrg-org / lkrg
Linux Kernel Runtime Guard
Kicksecure / security-misc
Miscellaneous Linux security hardening settings for Kicksecure and derivatives
GrapheneOS / platform_manifest
Repo manifest for the GrapheneOS mobile privacy and security hardening project.
cynicsketch / nix-mineral
Conveniently and reasonably harden NixOS.
wazuh / wazuh-dashboard-plugins
Plugins for Wazuh Dashboard
bytedance / vArmor
vArmor is a cloud-native container hardening system that leverages AppArmor/BPF/Seccomp and NetworkProxy technologies to enforce access control from system calls to application protocols β protecting workloads including AI Agents.
Taiquan-Zhou / RunTheRepo
An AI agent for running, testing, and hardening GitHub Docker Compose apps.δΈδΈͺη¨δΊθΏθ‘γζ΅θ―εε εΊ GitHub Docker Compose εΊη¨η AI Agentγ
kairowan / Shellsmith
Android δΈ iOS εΊη¨ε εΊε·₯ε · Β· Android and iOS app hardening
armourinfosec / Enterprise-Windows-Infrastructure-Security
An Obsidian-based knowledge base for Windows Server administration and defensive hardening.
armourinfosec / Linux-Administration-and-Server-Hardening
Lab-driven, dual-distro (CentOS Stream 10 / Debian 12) Linux Administration & Server Hardening course β 29 modules, 20 labs, 10 enterprise projects, RHCSA/LFCS-aligned.
armourinfosec / Secure-WordPress-Administration
Open-source, lab-driven study notes for building, administering, hardening, and operating WordPress at scale β 28 modules across install, content, security, performance, and DevOps (CC BY 4.0).
KBT096 / windows-secure-toolkit
Local Windows security auditing and reversible hardening with a C#/.NET Framework 4.8 core and CMD/BAT entry points.
jimididit / koncreet
First-hour hardening toolkit for a new Linux VPS.
wuyhong715 / rikkahub-agent-pure
RikkaHub Agent Β· Pure β an Android AI agent that survives long runs. Independent hardening pass on the rikkahub on-device agent: usage ledger & budgets, on-demand tools, expert sub-agents, cold memory, chained workflows. Kotlin/Compose, Shizuku/Termux/MCP. QQ group 1030362371.
e2sy / jailbreak-archives
A structured, versioned archive of adversarial prompt engineering techniques against Large Language Models β for AI safety research, red-teaming, and defensive hardening.
OrbSec / satellite
Orb44 Watch satellite - inside pulse from your VPS (load, listeners, hardening).
M-med / Active-Directory-Simulation-Attack-
A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening (gMSA, tiering, LLMNR/NetBIOS disabling) with Wazuh SIEM detection rules mapped to MITRE ATT&CK.
uzokingkong / BTG-packer
A Rust-based x86-64 PE protection framework with RISC program virtualization, polymorphic VM bytecode, CFG transformation, runtime hardening, integrity checks, and execution verification.
OWASP / OWASP-Subtractive-Hardening-Top-10
The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber risk through the elimination of attack paths.
yurne91 / Godot-Secure-Build-Pipeline
Build a custom Godot 4.7.1 editor and matching export templates for either a C#/.NET or GDScript project using Godot Secure, AES-256 PCK encryption, encrypted PCK indexes, Advanced Key Derivation, and release hardening.
xqzme69 / A2MBA-LLVM
LLVM 21 pass plugin for AΒ²MBA architectural and anti-generalization hardening of mixed Boolean-arithmetic expressions.