Tools
hardening
konstruktoid/hardening
A shell-based Ubuntu hardening script that applies account, audit, AppArmor, cron and package policies, with an extensive Bats test suite for validating the settings.
Topics
Related projects
prowler15.2kProwler is an open-source cloud security and compliance platform with thousands of built-in checks and compliance frameworks. It scans AWS, Azure, GCP, Kubernetes and other environments, offering a CLI, a self-hosted local server and AI-assisted capabilities.
graudit1.7kA lightweight source-code auditing tool that uses grep and language-specific regex signature databases to flag potential security flaws from the command line.
terraform-aws-secure-baseline1.2kA Terraform module that hardens an AWS account to CIS and AWS Foundational Security baselines, covering IAM, logging, monitoring, networking, and encryption defaults.
trivy39.3kA comprehensive security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM issues across container images, filesystems, repositories, Kubernetes, and clouds.
web-check35.5kAn all-in-one OSINT web application that analyses any website's security configuration, server architecture, technologies, and potential attack surface.
gitleaks31kA fast CLI scanner that finds passwords, API keys, and tokens leaked in git repos, files, and CI pipelines.