Libraries & frameworks
hardened_malloc
GrapheneOS/hardened_malloc
hardened_malloc is a security-focused general-purpose memory allocator implementing the malloc API, with strong mitigations against heap corruption and use-after-free for Linux and Android.
Topics
Related projects
memguard2.8kMemGuard is a pure Go library that stores sensitive data in encrypted, guarded memory buffers. It uses direct system calls, avoids swapping and core dumps, and mitigates side-channel attacks for developers embedding it in their programs.
terraform-aws-secure-baseline1.2kA Terraform module that hardens an AWS account to CIS and AWS Foundational Security baselines, covering IAM, logging, monitoring, networking, and encryption defaults.
nix-mineral582A NixOS module for system hardening that applies kernel, filesystem, network, module blacklist, and entropy settings to reduce attack surface with configurable presets.
prowler15.2kProwler is an open-source cloud security and compliance platform with thousands of built-in checks and compliance frameworks. It scans AWS, Azure, GCP, Kubernetes and other environments, offering a CLI, a self-hosted local server and AI-assisted capabilities.
bunkerweb11.3kAn open-source, cloud-native Web Application Firewall built on NGINX that protects web services with secure-by-default features.
windows_hardening2.7kHardeningKitty and a Windows hardening checklist that audit and apply CIS, STIG, BSI and Microsoft security baselines via PowerShell.