Securizarea serverelor și instrumente de audit
For un toolkit pentru securizarea serverelor, the strongest matches are dev-sec/ansible-collection-hardening (This Ansible collection provides idempotent security-hardening roles for Linux), dev-sec/ansible-os-hardening (This Ansible roles collection enforces security-hardened configurations on Linux) and docker/docker-bench-security (docker-bench-security is a Docker-specific security compliance auditor that checks). cisofy/lynis and 0x6d69636b/windows_hardening round out the shortlist. Each is ranked by relevance to your query, popularity and recent activity.
Instrumente automatizate și scripturi de configurare pentru securizarea mediilor de server împotriva accesului neautorizat și a vulnerabilităților comune.
Securizarea serverelor și instrumente de audit
Găsește cele mai bune repo-uri cu AI.Vom căuta cele mai potrivite repository-uri folosind AI.
- dev-sec/ansible-collection-hardening
dev-sec/ansible-collection-hardening
5,225Vezi pe GitHubThis is an Ansible collection that automates security hardening for Linux operating systems, databases, web servers, and SSH services. It provides a declarative, modular architecture that enforces idempotent security configurations, ensuring that each task only applies changes when the current system state deviates from the desired security baseline. The collection organizes security configurations into reusable Ansible roles, each targeting a specific system component. It includes roles for hardening OpenSSH with key-only authentication and disabled root login, securing MySQL and MariaDB ins
This Ansible collection provides idempotent security-hardening roles for Linux, databases, and web servers, directly matching the need for a CIS-aligned, automated auditing and remediation tool.
JinjaAutomated Hardening PlaybooksSystem State Idempotency - dev-sec/ansible-os-hardening
dev-sec/ansible-os-hardening
5,391Vezi pe GitHubThis project is a collection of automated hardening frameworks and Ansible roles designed to secure Linux systems, databases, SSH services, and web servers. It functions as a configuration framework that reduces the attack surface of Linux distributions through the automated enforcement of security policies. The collection provides specific security baselines for a variety of services, including MySQL databases, OpenSSH daemons, and web servers such as Nginx and Apache. These roles are designed to remove insecure defaults, enforce secure authentication methods, and align system configurations
This Ansible roles collection enforces security-hardened configurations on Linux systems, databases, and web servers, fitting the request for an automated hardening framework, though explicit CIS benchmark alignment and built-in audit reporting are not emphasized.
JinjaSecurity BaselinesSystem State Idempotency - docker/docker-bench-security
docker/docker-bench-security
9,655Vezi pe GitHubThis project is a security compliance tool and configuration auditor designed to evaluate Docker deployments against industry security benchmarks. It functions as a script-based scanner that identifies misconfigurations and vulnerabilities within both the host operating system and container settings. The tool specifically implements the Center for Internet Security standards for Docker to verify host and container configurations. It enables a hardening workflow by comparing system states against these standards to identify security gaps and document compliance status. The audit engine suppor
docker-bench-security is a Docker-specific security compliance auditor that checks hosts and containers against CIS benchmarks, making it a narrower but still correct type of server security tool, though it lacks automated remediation and multi-OS support.
ShellCIS Benchmark Implementations - cisofy/lynis
CISOfy/lynis
15,284Vezi pe GitHubLynis is an automated security auditing and system hardening framework designed for UNIX-based operating systems. It functions as a command-line utility that inspects local system configurations to identify security vulnerabilities, configuration weaknesses, and compliance gaps. By executing a series of modular tests, the tool generates actionable reports and remediation suggestions to assist in strengthening system defenses. The project distinguishes itself through a highly modular architecture that relies on shell-script-based execution and native system inspection. Users can define custom
Lynis is a security auditing and hardening framework that inspects Unix systems for vulnerabilities and compliance gaps, fitting your need for server hardening, though it emphasizes auditing and remediation suggestions over automated, idempotent application of CIS baselines.
ShellAutomated Security ScannersSecurity Auditing ToolsSecurity Testing and Auditing - 0x6d69636b/windows_hardening
0x6d69636b/windows_hardening
2,631Vezi pe GitHubWindows Hardening is a PowerShell-based automation framework designed for security assessment and configuration management within Windows environments. It provides a suite of administrative utilities to enforce industry-standard security benchmarks, audit system compliance, and reduce the overall attack surface of host machines. The project distinguishes itself by offering specialized capabilities for enterprise-wide configuration management, including the ability to transform security findings into deployable group policy objects. It also integrates system state management, allowing administ
This is a Windows-specific server hardening tool that applies and audits CIS and STIG configurations via PowerShell, matching the core intent for a security-hardening tool, though it lacks the multi-OS support you may be looking for.
PowerShellWindows Security HardeningWindows Security HardeningGPO Transformation Utilities - hotcakex/harden-windows-security
HotCakeX/Harden-Windows-Security
4,139Vezi pe GitHubHarden-Windows-Security is a security hardening tool and framework designed to reduce the attack surface of the Windows operating system through policy enforcement. It provides a collection of security presets and templates to implement official hardening standards across multiple devices. The project distinguishes itself through a comprehensive execution control system, featuring a manager for Windows Application Control and a kernel protection suite. It implements strict trust models, including kernel-mode driver whitelisting, signed policy implementation on the EFI partition, and code inte
Harden-Windows-Security is a security hardening framework for Windows that applies policy enforcement and security presets, making it a genuine server security hardening tool; while it lacks explicit CIS benchmark mention and multi-OS support, it fits the core intent of applying and auditing hardened configurations.
C#Application Execution ControlsWindows HardeningWindows Security Hardening
