HardenedBSD implements strong exploit mitigations and security hardening technologies on top of FreeBSD, with a direct focus on the nexus between human rights and information security. HardenedBSD is the first (and only) enterprise operating system to have every part of its public infrastructure accessible by human-rights focused technologies li…

Windows Exploit Protection Settings (Ultimate)

A windows hardening script that makes it difficult to compromise a Windows device. Only for use during Blue-Team Competitions.

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

Scripts and Documentation for Hardening Windows Command Prompt and PowerShell

Ultimate Applocker Hardening Configuration Script.

A collection of scripts and configurations for hardening various systems and applications.

C# Based GUI for Windows-Optimize-Harden-Debloat

Enhance the security and compliance of your standalone Windows servers with our STIG script, specifically designed to meet DoD STIG/SRG requirements and NSACyber guidance. Achieve ultimate Windows Server protection with our easy-to-use script.

Harden Windows with Windows Defender Application Control (WDAC)

Create a compliant and secure Windows 10/11 system with our Gold Master image creation tool. Adhere to DoD STIG/SRG Requirements and NSA Cybersecurity guidance for standalone Windows systems with ease, using our ultimate STIG script.

A collection of tested automations for implementing DoD STIGs and SRGs

Enhance the security and privacy of your Windows 10 and Windows 11 deployments with our fully optimized, hardened, and debloated script. Adhere to industry best practices and Department of Defense STIG/SRG requirements for optimal performance and security.

CIS Ubuntu 22.04 - v2.0.0 - Ansible Role

Security automation content in SCAP, Bash, Ansible, and other formats

Android debloating via debugging

🛡️ Open-source and next-generation Web Application Firewall (WAF)

Secure GitHub actions with 1 line of code

Network egress filtering and runtime security for GitHub-hosted and self-hosted runners

This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL