Topics / #hardening

Hardening projects on GitHub

Hardening guides and tools for securing servers and OS installs.

As of October 17, 2026, the most-starred Hardening projects on GitHub are How-To-Secure-A-Linux-Server (31.8K stars), slim (23.4K stars) and macOS-Security-and-Privacy-Guide (22.6K stars). GitHub.Locker tracks 9 Hardening repositories with 156.7K stars combined. The fastest-growing on October 16 was prowler, with +9 stars in a day.

9Projects

156.7KStars in total

+31Stars in a day

Browse in the catalog →github.com/topics/hardening ↗

Hot right now

Most stars gained in a day · Oct 16

prowler

prowler-cloud/prowler · ★ 15K

Prowler is an open-source cloud security platform that automates security and compliance checks across AWS, Azure, GCP, Kubernetes, M365, GitHub, and many other providers.

user.js

arkenfox/user.js · ★ 12.9K

arkenfox user.js is a community-maintained Firefox configuration template that hardens privacy and security settings, aiming to reduce tracking and fingerprinting as much as possible while trying to keep the browser usable.

bunkerweb

bunkerity/bunkerweb · ★ 11.1K

BunkerWeb is an open-source, next-generation Web Application Firewall (WAF) built as a full-featured web server on top of NGINX. It protects your web applications and APIs 'secure by default' while integrating as a reverse proxy into your existing environment.

lynis

CISOfy/lynis · ★ 16.5K

Lynis is a security auditing and hardening tool for Linux, macOS, BSD, and other Unix-like systems. It scans the host it runs on for vulnerable software, misconfigurations, and weak settings, and gives hardening tips while also assisting with compliance testing (HIPAA, ISO27001, PCI DSS).

The all-time top

9 projects · by stars

#1 · imthenachoman/How-To-Secure-A-Linux-Server
How-To-Secure-A-Linux-Server
This is a long-form, evolving how-to guide (written as a GitHub README) that walks you through hardening a self-hosted Linux server, step by step, from SSH to firewalls to intrusion detection.
31.8K
#2 · slimtoolkit/slim
slim
SlimToolkit (formerly DockerSlim) is a free, open-source CLI toolkit that inspects, optimizes and debugs container images. It can shrink an image by up to 30x without you changing anything in your Dockerfile — and makes the result more secure too.
23.4K
#3 · drduh/macOS-Security-and-Privacy-Guide
macOS-Security-and-Privacy-Guide
A community-maintained guide collecting techniques for improving security and privacy on macOS, written for Apple silicon Macs.
22.6K

4
lynis
16.5KCISOfy/lynis · Shell
Lynis is a security auditing and hardening tool for Linux, macOS, BSD, and other Unix-like systems. It scans the host it runs on for vulnerable software, misconfigurations, and weak settings, and gives hardening tips while also assisting with compliance testing (HIPAA, ISO27001, PCI DSS).
5
prowler
15Kprowler-cloud/prowler · Python
Prowler is an open-source cloud security platform that automates security and compliance checks across AWS, Azure, GCP, Kubernetes, M365, GitHub, and many other providers.
6
user.js
12.9Karkenfox/user.js · JavaScript
arkenfox user.js is a community-maintained Firefox configuration template that hardens privacy and security settings, aiming to reduce tracking and fingerprinting as much as possible while trying to keep the browser usable.
7
YubiKey-Guide
12.5Kdrduh/YubiKey-Guide · HTML
A community guide for using a YubiKey hardware security key to store GnuPG (PGP) keys and SSH keys, so cryptographic secrets live on a physical device instead of a disk.
8
bunkerweb
11.1Kbunkerity/bunkerweb · Python
BunkerWeb is an open-source, next-generation Web Application Firewall (WAF) built as a full-featured web server on top of NGINX. It protects your web applications and APIs 'secure by default' while integrating as a reverse proxy into your existing environment.
9
the-practical-linux-hardening-guide
10.9Ktrimstray/the-practical-linux-hardening-guide
A free, practical guide to hardening GNU/Linux servers for production. It offers step-by-step instructions built on industry standards (CIS, STIG, NIST) and OpenSCAP baselines.