Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Projects in Awesome Lists tagged with hardened

A curated list of projects in awesome lists tagged with hardened .

https://github.com/endojs/endo

Endo is a distributed secure JavaScript sandbox, based on SES

capabilities captp hardened javascript multi-tenant ocaps powerbox prototype-pollution sandbox security supply-chain

Last synced: 16 Apr 2026

https://github.com/wader/static-ffmpeg

Multi-arch docker image with ffmpeg/ffprobe binaries built as hardened static PIE binaries with no external dependencies

amd64 arm64 aslr docker ffmpeg ffprobe hardened static-binary

Last synced: 05 Oct 2025

https://github.com/Scrut1ny/Hypervisor-Phantom

Advanced malware analysis tool for evading detection from advanced malware.

ac bypass edk2 exam hardened hidden hypervisor kvm ovmf proctor qemu rdtsc spoofing undetectable vbox virtual-machine virtualbox vm vmware xml

Last synced: 26 Oct 2025

https://github.com/olivomarco/my-ansible-linux-setup

Simple, perfect setup of a Linux machine via Ansible

ansible-playbook docker hardened linux-server linux-setup perfect-server

Last synced: 25 Jan 2026

https://github.com/celenityy/Phoenix

Phoenix is a suite of configurations & advanced modifications for Mozilla Firefox, designed to put the user first - with a focus on privacy, security, freedom, & usability.

anti-tracking browser firefox firefox-based firefox-browser gecko hardened hardening mozilla mozilla-firefox privacy private secure security settings speed tracking user-js userjs web-browser

Last synced: 19 Mar 2026

https://github.com/celenityy/phoenix

Phoenix is a suite of configurations & advanced modifications for Mozilla Firefox, designed to put the user first - with a focus on privacy, security, freedom, & usability.

anti-tracking browser firefox firefox-based firefox-browser gecko hardened hardening mozilla mozilla-firefox privacy private secure security settings speed tracking user-js userjs web-browser

Last synced: 02 Apr 2026

https://github.com/juancarlospaco/nim-firejail

Firejail wrapper for Nim, Isolate your Production App before its too late!

firejail hardened hardening infosec nim nim-lang secure secure-by-default security security-hardening security-tools

Last synced: 21 Mar 2025

https://github.com/celenityy/grapheneos-settings

My recommendations for the ultimate GrapheneOS Configuration :)

android anti-tracking grapheneos hardened hardening privacy privacy-protection security tracking

Last synced: 08 Jun 2026

https://github.com/ammnt/freenginx

Distroless FreeNGINX with HTTP/3, QUIC and PQC support🚀

0-rtt alpine distroless docker fastopen fork freenginx hardened http2 http3 https nginx openssl pqc quic rootless tls unprivileged web

Last synced: 11 Feb 2026

https://github.com/celenityy/dove

Dove is a suite of configurations & advanced modifications for Mozilla Thunderbird, designed to put the user first - with a focus on privacy, security, freedom, & usability.

anti-tracking email gecko hardened hardening mozilla privacy private secure security settings thunderbird tracking user-js userjs

Last synced: 25 Feb 2026

https://github.com/celenityy/better-vanadium

My recommendations for the ultimate configuration of the Vanadium web browser to maximize privacy, security, and usability. :)

ads android android-application anti-fingerprinting anti-tracking aosp aosp-android chromium chromium-browser divested grapheneos hardened hardening mulch privacy privacy-protection security security-hardening tracking vanadium

Last synced: 04 Aug 2025

https://github.com/wandapeter/hardened-ubuntu-server-dokku

🐋 hardened ubuntu server dokku | This repository contains scripts, configuration templates, and documentation used for the initial setup of a hardened Ubuntu 22.04 LTS server using the Dokku service to host websites in a secure production environment.

aide certbot cis-benchmark cis-level2 devops docker hardened hosting modsecurity modsecurity-nginx nginx security ubuntu-server vps

Last synced: 14 Apr 2026

https://github.com/quenchworks/charts

Clean-room Helm charts for the QuenchWorks catalog: each pinned to a signed, 0-CVE image digest, published as OCI to GHCR and listed on ArtifactHub.

artifacthub cosign devsecops digest-pinned hardened helm helm-charts k8s kubernetes oci security sigstore

Last synced: 22 Jun 2026

https://github.com/kugland/docker-darkhttpd

Serve static files with statically-linked darkhttpd.

container darkhttpd docker docker-image hardened http-server httpstatic static-server

Last synced: 18 Jan 2026

https://github.com/john0n1/on1os

A security-focused, minimalist Linux distribution built with modern hardening techniques and TPM2/LUKS2 support.

buildroot dracut hardened hardening linux linux-distribution linux-hardened luks2 operating-system security-tools tpm2

Last synced: 27 Jul 2025

https://github.com/weby-homelab/voip-installer

Secure, Dockerized Asterisk 22 Installer for Ubuntu 24.04. Auto-configures PJSIP, TLS/SRTP, Let's Encrypt, Fail2Ban & NFTables.

asterisk automation docker fail2ban hardened iac infrastructure-as-code letsencrypt nftables official-docker-ce-install opus-codec pjsip security self-hosted sip speex srtp telephony ubuntu-server voip

Last synced: 22 Apr 2026

https://github.com/vasic-digital/tmux

Optimized + verified containerized tmux build — reproducible across hosts, jemalloc-aware, OOM-protected, 8-test verification gate. Reusable on any Linux system.

containerized custom hardened memory-safe oom protected safety tmux tmx tmx-ci tmx-command

Last synced: 11 Jun 2026

https://github.com/kyaulabs/aarch

Automated Arch Linux is a template-based automated installer for Arch Linux.

arch-linux archlinux automated bash bash-script hardened hardened-image hardened-linux-scripts linux shell-script shell-script-linux-installer

Last synced: 18 Apr 2026

https://github.com/kenshodigital/frankenphp

A minimal FrankenPHP image.

container dhi docker frankenphp hardened image php

Last synced: 19 Jun 2026

https://github.com/carlos-tech-ops/ansible-control-node

Ansible control node with hardened SSH, Tailscale VPN, and key-only remote access

access-control ansible automation devsecops hardened linux node ssh tailscale vpn

Last synced: 18 Jun 2025

https://github.com/tiliavir/raspi-web-server

Raspberry 4 model B - Web Server

hardened raspberry-pi webserver

Last synced: 16 Jun 2026

https://github.com/kuladog/fedora-xfce-minimal

A simple bash script and configs to setup a secure Fedora Xfce Minimal workstation

configs dotfiles fedora hardened linux minimal security setup-script xfce

Last synced: 18 Apr 2026

https://github.com/vnegrea/ldaplookup

Hardened LDAP lookup tool with embedded credentials, runtime locks, and anti-tampering protection

authentication binary-obfuscation garble go golang hardened ldap ldap-client obfuscation security

Last synced: 30 May 2026

https://github.com/io7m-com/jxe

Security-enhanced XML utilities

hardened java sax security xml

Last synced: 22 Mar 2025

https://github.com/quenchworks/common

quench-common: the shared Helm library chart for the QuenchWorks catalog (hardened pod/container security contexts + a digest-only image resolver).

hardened helm helm-charts helm-library-chart kubernetes security

Last synced: 22 Jun 2026

https://github.com/rhjddjdbc/arch-hardened

arch-hardening script

arch hardened hardening

Last synced: 18 Apr 2026

https://github.com/ajschofield/hardened-debian

A WIP repository housing my Debian configs

debian hardened

Last synced: 12 Jul 2025

https://github.com/wuweifly/hypervisor-phantom-nix

A Nix port of Hypervisor-Phantom: a tool for VM hardening

analysis flake hardened hypervisor kvm malware nix phantom vm

Last synced: 13 May 2025

https://github.com/artagon/artagon-containers

Hardened multi-arch OCI images for JVM workloads. JDK 25/26/Valhalla on Chainguard, Distroless, and UBI. Non-root, digest-pinned, SBOM-attested, Cosign-signed. Production-ready security-first containers for amd64/arm64.

chainguard cloud-native containers cosign distroless docker hardened java jdk26 jvm kubernetes multi-arch oci openjdk sbom security supply-chain ubi valhalla wolfi

Last synced: 30 Apr 2026

https://github.com/carlossemeao/ansible-control-node

Ansible control node with hardened SSH, Tailscale VPN, and key-only remote access

access-control ansible automation devsecops hardened linux node ssh tailscale vpn

Last synced: 07 May 2026

https://github.com/kuladog/arch-xfce-hardened

Installer and hardened configs for my Arch box

arch-linux bash bootstrap configs dotfiles hardened install-script linux security

Last synced: 05 May 2026