H

hardening

Full set of AppArmor profiles (~ 1500 profiles) https://apparmor.pujol.io

Private, secure, user first web browser for Android. https://ironfoxoss.org/

Locking down a public AKS cluster: Entra ID authentication with admin and reader groups, API server IP whitelist, namespace resource quotas, and keyless cloud authentication through Workload Identity.

Auditoria de hardening de imagens Docker: orquestra hadolint, trivy e dockle, normaliza a saida numa politica unica de 14 propriedades e preenche as lacunas medidas

Ansible-коллекция tunnel_builders.node_base: базовая настройка VPS — hardening, fail2ban, UFW с allowlist

ParrotSec Linux - Hardening Project

Designing & implementing a restricted & trustworthy environment

Ansible role to run OpenSCAP XCCDF audits and optional remediation. SCAP content and profiles are based on the ComplianceAsCode project.

A surgical pipeline that strips Windows 11 to a quiet, hardened, telemetry-free baseline you fully control.

Copy Fail - CVE-2026-31431 - Hardened C implementation for redteam and authorized penetration testing operations. ⚠️ Legal Notice: This tool is intended solely for authorized security research, authorized penetration testing, and defensive analysis. Use on systems you own or have explicit written permission to test. Unauthorized access to computer systems is illegal.

A Linux Setup and Hardening Script

Remote Execution Attack Surface Audit Tool for Active Directory - Defensive Blue Team Security Tool

https://ayinedjimi-consultants.fr

C++ HTTP security header analyzer for web application hardening

https://ayinedjimi-consultants.fr

A simple, runbook-led macOS baseline for home and personal use. Targets non-security users who want reasonable defaults -- a sensible firewall, basic CIS Level 1 controls, a few hygiene habits -- without the operational overhead of an enterprise hardening tool.

Ansible role for simple server hardening

Firefox 🦊 hardening by CHEF-KOCH

Hardens Brave Browser to reach its maximum potential. I am not affiliate with Brave Software, Inc. and I do this in my free time and on my own terms.

Thunderbird user.js hardening by CHEF-KOCH

Harden a minimal Debian install (with nothing optionnal installed except "openssh-server"). Based on CIS Benchmark.