GitHub stars · StarDay

1imthenachoman / How-To-Secure-A-Linux-ServerA guide collecting Linux server hardening steps.CC-BY-SA-4.0 · Share derivative source32,043

2drduh / macOS-Security-and-Privacy-GuideCommunity guide to securing and improving privacy on macOS.ShellMIT · Permissive22,579

3CISOfy / lynisLynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.ShellGPL-3.0 · Share derivative source16,647

4prowler-cloud / prowlerAuthor description: This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.PythonApache-2.0 · Permissive15,184

5drduh / YubiKey-GuideCommunity guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.HTMLMIT · Permissive13,068

6bunkerity / bunkerweb🛡️ Open-source and cloud-native Web Application Firewall (WAF)PythonAGPL-3.0 · Share derivative source11,231

7trimstray / the-practical-linux-hardening-guideThis guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).MIT · PermissiveInactive10,910

8dev-sec / ansible-collection-hardeningThis Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQLJinjaApache-2.0 · Permissive5,528

9AdventDevInc / kuduFree Windows, Mac and Linux cleaner, scanner, and more.TypeScriptMIT · Permissive4,198

10hardentools / hardentoolsHardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.GoGPL-3.0 · Share derivative sourceInactive3,111

11GrapheneOS / hardened_mallocHardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.CMIT · Permissive2,055

12stampery / mongoaudit🔥 A powerful MongoDB auditing and pentesting tool 🔥PythonMIT · PermissiveInactive1,327

13step-security / harden-runnerHarden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.TypeScriptApache-2.0 · Permissive1,296

14Normation / rudderRudder is a configuration and security automation platform. Manage your Cloud, hybrid or on-premises infrastructure in a simple, scalable and dynamic way.ScalaGPL-3.0 · Share derivative source722

15ifritnoises / saraRouterOS Security Assessment ToolkitPythonMIT · Permissive354