🔒 Strengthen Proxmox VE 9+ security by creating a dedicated user, enabling SSH key authentication, and applying best practices for access control.

🔍 Audit IKE VPN servers with IKESS to detect vulnerabilities and generate detailed reports for improved security and risk assessment.

🔐 Harden your remote Debian-based servers with a comprehensive POSIX shell toolkit, ensuring safety and compatibility through automated backup and rollback features.

🛡️ Open-source and next-generation Web Application Firewall (WAF)

Rudder is a configuration and security automation platform. Manage your Cloud, hybrid or on-premises infrastructure in a simple, scalable and dynamic way.

GixyNG: NGINX Security Scanner & Configuration Checker for Security Audits

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

A personal experiment with Linux hardening

A GitHub Action to apply cisagov's standard permissions monitoring and runner hardening. This Action is intended to be applied at the beginning of every GitHub Actions job.

Security automation content in SCAP, Bash, Ansible, and other formats

Linux Security hardening Scripts for Enterprise Linux Redhat (RHEL) & Clones (AlmaLinux, RockyLinux) / Debian

HardenedBSD implements strong exploit mitigations and security hardening technologies on top of FreeBSD, with a direct focus on the nexus between human rights and information security. HardenedBSD is the first (and only) enterprise operating system to have every part of its public infrastructure accessible by human-rights focused technologies li…

Modern hybrid Debian 13 server setup: Easy Bash scripts + powerful Ansible playbooks. Secure config for Samba, NFS, Apache, MariaDB, SSH & more using devsec, hardening. Quick bootstrap for home labs or production! 🚀

Reusable GitHub Actions workflows for automated security hardening, featuring modular scanners (SAST, container, IaC, malware) with consolidated reports and PR comments.

Dove is a suite of configurations & advanced modifications for Mozilla Thunderbird, designed to put the user first - with a focus on privacy, security, freedom, & usability.

Phoenix is a suite of configurations & advanced modifications for Mozilla Firefox, designed to put the user first - with a focus on privacy, security, freedom, & usability.

Ansible role to install a rootless Docker server

Enterprise-Grade Security & Privacy Hardening Tool for Windows 11 25H2

This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL

Automation Troubleshooting Framework to validate and report configuration, software installed, etc with bash, python, and your language of choice.