An evolving how-to guide for securing a Linux server.

Agent-less vulnerability scanner for Linux, FreeBSD, Container Image, Running Container, WordPress, Programming language libraries, Network devices

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls listed here https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf and more than 100 additional checks that help on GDPR, HIPAA and other security requirements.

user.js -- Firefox configuration hardening

Wazuh - The Open Source Security Platform

Migrate C code to Rust

Librefox: Firefox with privacy enhancements

🔑 Community-driven Rails Security Checklist (see our GitHub Issues for the newest checks that aren't yet in the README)

Generates sandboxes for C/C++ libraries automatically

Security automation content in SCAP, OSCAL, Bash, Ansible, and other formats

Simple Golang HTTPS/TLS Examples

Easily configure macOS security settings from the terminal.

USBGuard is a software framework for implementing USB device authorization policies (what kind of USB devices are authorized) as well as method of use policies (how a USB device may interact with the system)

Hardening Ubuntu. Systemd edition.

Security Knowledge Framework (SKF) Python Flask / Angular project

A collection of awesome security hardening guides, tools and other resources

Scripts built from our Guide to User Data Security

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations.

Ansible playbook roles for security

🕷️ XSS Listener is a penetration tool for easy to steal data with various XSS.

Security module for php7 - Killing bugclasses and virtual-patching the rest!

Quickly secure UNIX/Linux systems

Ansible role for Red Hat 7 CIS Baseline

Wazuh - Ruleset

Look-Ahead Java Deserialization Library

Ansible role for Red Hat 7 STIG Baseline

Function order shuffling to defend against ROP and other types of code reuse

Continuously monitor your AWS services for configurations that can lead to degradation of confidentiality, integrity or availability. All results will be sent to Security Hub for further aggregation and analysis.