# Server Hardening and Security Auditing

> AI-ranked search results for `harden a server against attacks with audited configs` on awesome-repositories.com — ordered by an LLM for relevance, best match first. 109 total matches; showing the top 6.

Explore on the web: https://awesome-repositories.com/q/harden-a-server-against-attacks-with-audited-configs

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [this search on awesome-repositories.com](https://awesome-repositories.com/q/harden-a-server-against-attacks-with-audited-configs).**

## Results

- [dev-sec/ansible-collection-hardening](https://awesome-repositories.com/repository/dev-sec-ansible-collection-hardening.md) (5,225 ⭐) — This is an Ansible collection that automates security hardening for Linux operating systems, databases, web servers, and SSH services. It provides a declarative, modular architecture that enforces idempotent security configurations, ensuring that each task only applies changes when the current system state deviates from the desired security baseline.

The collection organizes security configurations into reusable Ansible roles, each targeting a specific system component. It includes roles for hardening OpenSSH with key-only authentication and disabled root login, securing MySQL and MariaDB ins
- [dev-sec/ansible-os-hardening](https://awesome-repositories.com/repository/dev-sec-ansible-os-hardening.md) (5,391 ⭐) — This project is a collection of automated hardening frameworks and Ansible roles designed to secure Linux systems, databases, SSH services, and web servers. It functions as a configuration framework that reduces the attack surface of Linux distributions through the automated enforcement of security policies.

The collection provides specific security baselines for a variety of services, including MySQL databases, OpenSSH daemons, and web servers such as Nginx and Apache. These roles are designed to remove insecure defaults, enforce secure authentication methods, and align system configurations
- [docker/docker-bench-security](https://awesome-repositories.com/repository/docker-docker-bench-security.md) (9,655 ⭐) — This project is a security compliance tool and configuration auditor designed to evaluate Docker deployments against industry security benchmarks. It functions as a script-based scanner that identifies misconfigurations and vulnerabilities within both the host operating system and container settings.

The tool specifically implements the Center for Internet Security standards for Docker to verify host and container configurations. It enables a hardening workflow by comparing system states against these standards to identify security gaps and document compliance status.

The audit engine suppor
- [cisofy/lynis](https://awesome-repositories.com/repository/cisofy-lynis.md) (15,284 ⭐) — Lynis is an automated security auditing and system hardening framework designed for UNIX-based operating systems. It functions as a command-line utility that inspects local system configurations to identify security vulnerabilities, configuration weaknesses, and compliance gaps. By executing a series of modular tests, the tool generates actionable reports and remediation suggestions to assist in strengthening system defenses.

The project distinguishes itself through a highly modular architecture that relies on shell-script-based execution and native system inspection. Users can define custom
- [0x6d69636b/windows_hardening](https://awesome-repositories.com/repository/0x6d69636b-windows-hardening.md) (2,631 ⭐) — Windows Hardening is a PowerShell-based automation framework designed for security assessment and configuration management within Windows environments. It provides a suite of administrative utilities to enforce industry-standard security benchmarks, audit system compliance, and reduce the overall attack surface of host machines.

The project distinguishes itself by offering specialized capabilities for enterprise-wide configuration management, including the ability to transform security findings into deployable group policy objects. It also integrates system state management, allowing administ
- [hotcakex/harden-windows-security](https://awesome-repositories.com/repository/hotcakex-harden-windows-security.md) (4,139 ⭐) — Harden-Windows-Security is a security hardening tool and framework designed to reduce the attack surface of the Windows operating system through policy enforcement. It provides a collection of security presets and templates to implement official hardening standards across multiple devices.

The project distinguishes itself through a comprehensive execution control system, featuring a manager for Windows Application Control and a kernel protection suite. It implements strict trust models, including kernel-mode driver whitelisting, signed policy implementation on the EFI partition, and code inte