H

hardening

Private, secure, user first web browser for Android. https://ironfoxoss.org/

Firebreak: hardening GitLab Duo Agent Platform flows on your own runners; a dedicated non-privileged flow runner, egress to the GitLab instance only, narrow flow identity, and audit, on OpenShift, Kubernetes, and Podman on one host.

Full set of AppArmor profiles (~ 1500 profiles) https://apparmor.pujol.io

Vitrina profesional: writeups de Hack The Box, informes, casos de estudio GRC (ISO 27001/27002/27005/27035, ISO 31000 + MAGERIT), scripts de hardening y roadmap eJPT -> ISO 27001 Lead Auditor -> CISA.

Windows identifier spoofer - backup, spoof, restore.

Locking down a public AKS cluster: Entra ID authentication with admin and reader groups, API server IP whitelist, namespace resource quotas, and keyless cloud authentication through Workload Identity.

Auditoria de hardening de imagens Docker: orquestra hadolint, trivy e dockle, normaliza a saida numa politica unica de 14 propriedades e preenche as lacunas medidas

Ansible-коллекция tunnel_builders.node_base: базовая настройка VPS — hardening, fail2ban, UFW с allowlist

ParrotSec Linux - Hardening Project

Designing & implementing a restricted & trustworthy environment

Ansible role to run OpenSCAP XCCDF audits and optional remediation. SCAP content and profiles are based on the ComplianceAsCode project.

A surgical pipeline that strips Windows 11 to a quiet, hardened, telemetry-free baseline you fully control.

Copy Fail - CVE-2026-31431 - Hardened C implementation for redteam and authorized penetration testing operations. ⚠️ Legal Notice: This tool is intended solely for authorized security research, authorized penetration testing, and defensive analysis. Use on systems you own or have explicit written permission to test. Unauthorized access to computer systems is illegal.

A Linux Setup and Hardening Script

Remote Execution Attack Surface Audit Tool for Active Directory - Defensive Blue Team Security Tool

https://ayinedjimi-consultants.fr

C++ HTTP security header analyzer for web application hardening

https://ayinedjimi-consultants.fr

A simple, runbook-led macOS baseline for home and personal use. Targets non-security users who want reasonable defaults -- a sensible firewall, basic CIS Level 1 controls, a few hygiene habits -- without the operational overhead of an enterprise hardening tool.

Ansible role for simple server hardening