Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices.

AVML - Acquire Volatile Memory for Linux

Linux security with three different distributions (Rocky Linux, Ubuntu and openSUSE)!

Vulnerability management tool that provides Yocto SBOM generation and CVE Analysis of target images.

Tracking CVEs for the linux Kernel

This script automates the scanning process using the OpenSCAP Security Guid to hardening Ubuntu systems, aligning with DISA-STIG compliance for Ubuntu 20.04 LTS minimum. It includes a range of security enhancements and configurations designed to strengthen the security posture of Ubuntu servers.

📝 LastLog Audit: Security Login Activity Analyzer.

Vulnerability management tool that provides OpenWRT SBOM generation and CVE Analysis of target images.

Vulnerability management tool that provides Buildroot SBOM generation and CVE Analysis of target images.

(EN) A script to execute the essential UFW rules. (ES) Secuencias de comandos para ejecutar las reglas esenciales de UFW.

🔒 Anti DDOS | Bash Script Project 🔒

Bash script to create nftables sets of country specific IP address ranges for use with firewall rulesets. The project provides a simple and flexible way to implement geolocation filtering with nftables. It can be a useful tool to reduce the chance of malware, ransomware and phishing attempts as well as mitigating the effects of DDoS attacks.

Lazily wraps various Linux system auditing tools

A desktop application that checks security-related settings and makes recommendations for improvements without requiring central device management or automated reporting.

A simple and user-friendly shell tool to increase security on linux distributions

Secure your Linux machine by blocking unwanted traffic and monitor your system

Basic Ansible role for Linux security

A hardening script for Ubuntu 22.04 x86-64

Let me just put this here & You go check if your sever is tight. **updated version is PRIVATE** Incl Full Internet & Personal Password List From Leaked Databases, Hacked Accounts & Wifi Attack Victims