Topics / #security-hardening

Security-hardening projects on GitHub

Guides and tools for hardening Linux servers against attacks.

As of , the most-starred Security-hardening projects on GitHub are How-To-Secure-A-Linux-Server (31.8K stars), API-Security-Checklist (23.3K stars) and NemoClaw (22.8K stars). GitHub.Locker tracks 8 Security-hardening repositories with 139.3K stars combined. The fastest-growing on October 16 was wazuh, with +10 stars in a day.

8Projects
139.3KStars in total
+36Stars in a day
Browse in the catalog →github.com/topics/security-hardening ↗

Hot right now

Most stars gained in a day · Oct 16

+10

wazuh

wazuh/wazuh · ★ 17.3K

Wazuh is a free, open source security platform (XDR and SIEM) for threat prevention, detection and response across on-premises, virtualized, containerized and cloud workloads.

+9

NemoClaw

NVIDIA/NemoClaw · ★ 22.8K

An open source reference stack from NVIDIA for running AI agents like OpenClaw, Hermes and LangChain Deep Agents more safely inside NVIDIA OpenShell sandboxes, with managed inference, network policy and lifecycle operations via its CLI.

+9

prowler

prowler-cloud/prowler · ★ 15K

Prowler is an open-source cloud security platform that automates security and compliance checks across AWS, Azure, GCP, Kubernetes, M365, GitHub, and many other providers.

+4

lynis

CISOfy/lynis · ★ 16.5K

Lynis is a security auditing and hardening tool for Linux, macOS, BSD, and other Unix-like systems. It scans the host it runs on for vulnerable software, misconfigurations, and weak settings, and gives hardening tips while also assisting with compliance testing (HIPAA, ISO27001, PCI DSS).

The all-time top

8 projects · by stars

  1. #1 · imthenachoman/How-To-Secure-A-Linux-Server

    How-To-Secure-A-Linux-Server

    This is a long-form, evolving how-to guide (written as a GitHub README) that walks you through hardening a self-hosted Linux server, step by step, from SSH to firewalls to intrusion detection.

    31.8K
  2. #2 · shieldfy/API-Security-Checklist

    API-Security-Checklist

    A community checklist of the most important security countermeasures to apply when designing, testing, and releasing an API — a list of checkboxes you run through before shipping.

    23.3K
  3. #3 · NVIDIA/NemoClaw

    NemoClaw

    An open source reference stack from NVIDIA for running AI agents like OpenClaw, Hermes and LangChain Deep Agents more safely inside NVIDIA OpenShell sandboxes, with managed inference, network policy and lifecycle operations via its CLI.

    22.8K
  1. 4

    wazuh

    17.3Kwazuh/wazuh · C++

    Wazuh is a free, open source security platform (XDR and SIEM) for threat prevention, detection and response across on-premises, virtualized, containerized and cloud workloads.

  2. 5

    lynis

    16.5KCISOfy/lynis · Shell

    Lynis is a security auditing and hardening tool for Linux, macOS, BSD, and other Unix-like systems. It scans the host it runs on for vulnerable software, misconfigurations, and weak settings, and gives hardening tips while also assisting with compliance testing (HIPAA, ISO27001, PCI DSS).

  3. 6

    prowler

    15Kprowler-cloud/prowler · Python

    Prowler is an open-source cloud security platform that automates security and compliance checks across AWS, Azure, GCP, Kubernetes, M365, GitHub, and many other providers.

  4. 7

    vuls

    12.3Kfuture-architect/vuls · Go

    Vuls is an open-source, agent-less vulnerability scanner written in Go. It automatically detects vulnerabilities affecting your servers and can generate reports on a regular basis, for example via CRON.

  5. 8

    vps-security-enhancement-scripts

    2380x10debug/vps-security-enhancement-scripts · Shell

    It is a security-first interactive bash script for hardening a fresh VPS or cloud server, bundled with a scenario-driven handbook and printable cheatsheets that explain why each fix matters, not just how to run it.

Often tagged together