Open-source alternatives to Azurelinux

This project is a security hardening guide and privacy configuration manual for macOS. It provides a comprehensive set of instructions for configuring system settings to improve privacy, reduce the attack surface, and implement a malware defense framework. The guide covers technical methods for validating software notarization, verifying application sandboxing, and auditing system activity. It distinguishes itself by providing detailed workflows for restricting high-risk features and applying advanced security configurations to protect the operating system. The documentation covers several k

This project is a comprehensive security hardening and privacy management guide for macOS. It provides a set of instructions and checklists for reducing the system attack surface through manual configuration, policy enforcement, and a layered defense strategy. The guide emphasizes a system auditing framework, using binary analysis, system logs, and packet inspection to verify that security controls and application sandboxing are functioning as intended. It offers tool-agnostic recommendations, defining security goals while allowing users to select their own third-party software for implementa

Rocky is an open-source enterprise operating system designed for server and cloud infrastructure. It is a community-maintained Linux server distribution that provides a platform focused on stability and security. The project is fundamentally a Red Hat Enterprise Linux compatible operating system, maintaining bug-for-bug binary compatibility to ensure identical software behavior. This allows it to serve as an enterprise-grade platform without proprietary licensing. The distribution covers a broad range of system administration capabilities, including package management via modular repository

This project is a comprehensive set of guides and frameworks designed to secure software-as-a-service infrastructure and company operations. It provides a collection of technical checklists, architectural patterns, and best practices for hardening cloud applications against cyber attacks. The project differentiates itself by providing specialized manuals for risk management and compliance readiness. It offers structured approaches to threat modeling, incident response planning, and the preparation of audit evidence required to meet industry security certifications and enterprise customer requ

Cloudsploit is a cloud security posture management tool and multi-cloud security auditor. It audits cloud infrastructure for misconfigurations and compliance risks across multiple providers, specifically AWS and Azure, by evaluating resource configurations against a set of security plugins. The project functions as a cloud compliance scanner that maps infrastructure scan results to regulatory frameworks and security policy standards. It also serves as an automated cloud remediation tool, executing corrective actions to fix detected misconfigurations via SDK calls. The system covers resource

Privatezilla is a Windows privacy hardening tool designed to audit security settings, remove pre-installed software, and block outbound telemetry data. It functions as an operating system security auditor and a telemetry blocker to restrict data transmission from third-party applications. The project provides automated utilities for removing built-in applications and cloud services. It employs firewall rules and host file restrictions to prevent unauthorized information collection and stop data transmission to external servers. The tool covers a broad range of system management capabilities,

Holoiso is a tool for building custom, bootable operating system images based on SteamOS 3 for installation on non-Steam Deck hardware. It uses a Linux Archiso base to generate installable disk images that replicate a handheld gaming experience on generic devices. The project enables the creation of a gaming-oriented distribution featuring a gamepad-driven interface and the ability to toggle between a standard desktop environment and a gaming session. It includes high-performance shaders for system-wide image upscaling to balance visual quality and frame rates across the gaming interface. Th

MotionEyeOS is a dedicated operating system designed to transform a single board computer into a video surveillance station. It provides a centralized environment for monitoring and recording multiple video feeds. The system enables remote camera management through a unified web interface, allowing for the control and configuration of networked security cameras. It supports automated video recording based on motion detection to monitor specific areas without requiring constant manual recording. The software incorporates a Debian-based root filesystem and a Python-based backend to orchestrate

Kustomize is a declarative configuration manager and manifest customizer for Kubernetes. It functions as a patching engine that transforms base YAML files into environment-specific configurations through overlays and composition, allowing for the generation of complex deployments without modifying original source files. The tool distinguishes itself by using an overlay-based resource composition model to layer environment overrides on top of shared bases. It employs strategic merge patching and recursive base resolution to flatten inherited configurations into a final output set. The project

Harden-Windows-Security is a security hardening tool and framework designed to reduce the attack surface of the Windows operating system through policy enforcement. It provides a collection of security presets and templates to implement official hardening standards across multiple devices. The project distinguishes itself through a comprehensive execution control system, featuring a manager for Windows Application Control and a kernel protection suite. It implements strict trust models, including kernel-mode driver whitelisting, signed policy implementation on the EFI partition, and code inte

Prowler is a multi-cloud security scanner and security posture management tool. It automates security and compliance assessments across multiple cloud environments to identify misconfigurations and vulnerabilities. The project provides a multi-cloud security analysis engine that operates as an automated auditor, evaluating infrastructure against industry-standard regulatory frameworks and security benchmarks. It features a cloud security visualization dashboard that uses a graph database to map cloud inventory and visualize potential attack paths. Capabilities include automated cloud infrast

Learn-Web-Hacking is a structured web security study guide and penetration testing knowledge base. It provides a collection of research notes focused on identifying and exploiting vulnerabilities in web applications and network protocols. The project includes specialized frameworks for evaluating security risks in large language models to prevent prompt injection, as well as guides for hardening cloud-native infrastructure, including container standards and orchestration tools. It also covers the analysis of identity standards and authentication protocols. The material spans a broad range of

Wazuh is an integrated security platform that combines endpoint detection and response, security information and event management, and cloud workload protection. It functions as a centralized system for collecting telemetry, aggregating logs, and correlating events across distributed infrastructure to maintain security and integrity. The platform distinguishes itself through its active response orchestration, which allows for the automated execution of scripts on remote endpoints to neutralize threats in real time. It provides deep visibility into system activity through file integrity monito

Nixpkgs is a comprehensive repository of declarative software definitions used to build and manage reproducible system environments. It functions as a framework for assembling operating system components and application dependencies into consistent, versioned, and verifiable software collections. By utilizing a functional derivation graph and a lazy evaluation model, the project ensures that software environments are defined as pure expressions, resulting in absolute reproducibility across different machines. The repository distinguishes itself through its ability to manage complex software l

Ubicloud is an open-source cloud infrastructure platform that provides a unified control plane for provisioning and managing virtual machines, container clusters, and managed databases. It functions as an infrastructure-as-code provider, utilizing declarative configuration files to automate the deployment and scaling of compute, networking, and storage resources across cloud environments. The platform distinguishes itself by integrating a dedicated managed PostgreSQL database service that automates backups, read replicas, and high-availability configurations. It also features a container orch

This project is a collection of shell scripts designed to automate the configuration and optimization of macOS environments. It functions as an administrative utility suite that modifies system-level properties, kernel settings, and background service definitions to improve responsiveness and streamline system performance. The tool is specifically engineered to support headless and virtualized environments by managing remote access, authentication workflows, and power states. It provides capabilities to bypass login screens, suppress background updates, and adjust system-wide environment vari

oapi-codegen is a suite of generators that converts OpenAPI 3 specifications into type-safe Go client libraries, server boilerplate, and data models. It provides tools for producing production-ready HTTP clients and server-side interfaces to ensure that Go implementations remain compliant with defined API contracts. The tool supports server generation across various web frameworks and allows for extensive customization via template overrides, specification overlays, and custom type definition mappings. It handles complex API requirements through external reference resolution to organize code

This project is an AI agent integration layer and skill library that connects large language models to external APIs and developer technologies. It functions as a cloud infrastructure automation framework, providing a standardized interface for managing compute, storage, and database resources through automated agent interactions. The system utilizes a skill registry to extend agent capabilities, allowing intelligent agents to interact with cloud platforms and productivity tools. It provides a resource management interface to execute configuration updates and implement standardized security p

FullPageOS is a Linux distribution that turns a Raspberry Pi into a dedicated web kiosk, booting directly into a full-screen browser without a desktop environment. It is designed for digital signage and single-purpose web application deployments, locking the device to a single webpage or a rotating set of pages. The system reads its startup URL and other kiosk parameters from plain text configuration files on the boot partition, allowing settings to be changed without reflashing the device. It includes a pre-configured VNC server for remote viewing and control of the kiosk display, and can em

This project is a Ruby-based package definition repository that functions as a cross-platform package manager and software dependency resolver for macOS and Linux. It provides a centralized system for installing, updating, and managing software through a Git-based distribution model. The system distinguishes itself through a binary package distribution network that produces pre-compiled bottles to avoid local compilation from source. It utilizes a Ruby-based domain specific language to define installation recipes and employs a distributed version control architecture to synchronize these defi

KubeArmor is a runtime security enforcement system designed to protect containerized workloads and host infrastructure by restricting unauthorized process, file, and network activity. It operates by deploying lightweight agents across nodes that utilize kernel-level interception and Linux Security Modules to monitor and block system operations in real time. By mapping these enforcement actions to specific container and pod identities, the platform maintains granular access control within multi-tenant environments. The project distinguishes itself through a declarative policy orchestration fra

Katoolin is a Debian software repository manager and security toolset automator. It functions as a script to automate the addition of repositories and the installation of security tools from Kali Linux onto other Debian-based systems. The project focuses on automating the deployment of penetration testing and forensics software. It provides a method for managing third-party software sources and provisioning security labs with tools for network and system testing without requiring a full operating system installation. The tool includes an interactive command line interface for navigating tool

This repository serves as a comprehensive reference library for cloud architecture design, providing standardized guidance and technical blueprints for building scalable, secure, and high-performance environments. It functions as a centralized knowledge base for engineering patterns, migration strategies, and infrastructure frameworks tailored for cloud-native solutions. The platform distinguishes itself through a component-driven documentation system that utilizes metadata-driven classification to organize complex architectural guidance. By employing a static site generator, the project comp

Paru is an Arch User Repository helper and system package manager that functions as a pacman wrapper. It automates the search, installation, and updating of software from the Arch User Repository and synchronizes local databases to upgrade installed software to the latest available versions. The tool provides a system for downloading build files and compiling software from community sources into installable packages. It includes capabilities for reviewing build configuration files and tracking development packages by monitoring upstream version control repositories. Additional features inclu

Arkade is a suite of tools for managing developer binaries, Kubernetes application deployments, and Helm chart maintenance. It functions as a CLI tool manager and a developer tool marketplace used to discover, download, update, and uninstall standalone binaries and system packages across different operating systems and architectures. The project is distinguished by its ability to extract executable binaries directly from OCI container images for local installation without requiring a container runtime. It also provides specialized utilities for Helm chart maintenance, including the ability to

Steamtinkerlaunch is a game launch wrapper and Wine prefix orchestrator designed to manage the execution environment of games on Linux. It functions as a compatibility layer manager that downloads and organizes custom Wine and Proton versions, while creating isolated filesystem hierarchies and registry hives to prevent configuration conflicts between games. The project specializes in automating the installation of mod managers and script extenders within these isolated environments. It acts as a post-processing shader injector, managing the installation and dynamic library overrides required

Spinnaker is a multi-cloud continuous delivery platform designed to automate software releases and deployment pipelines across various public cloud providers and Kubernetes clusters. It functions as a cloud deployment orchestrator and infrastructure delivery tool, coordinating the promotion of software artifacts through multiple environments using visual workflows and directed acyclic graphs. The platform distinguishes itself with a dedicated canary analysis engine that compares performance metrics between new and stable software versions to automate release decisions. It utilizes cloud-agnos