HardeningKitty and Windows Hardening Settings

🛡️ Security & Privacy Hardening Tool for Windows 11 25H2 — 630+ Settings, 7 Modules, BAVR Pattern.

Windows Server 安全基线巡检脚本，PowerShell 全自动检测账户策略、防火墙、审计日志、服务、补丁、共享、注册表等 15 大模块，输出工程师风 HTML 安全报告。

Windows 11 security hardening tool with STIG V2R9 & CIS Level 1-aligned baselines, privacy, debloat, networking, and gaming — Apply/Restore Default with restore-point safeguards.

Laravel Secure Baseline provides a fast, non-destructive scan to detect security misconfigurations in Laravel 10/11: env vars, session/cookie flags (Secure/HttpOnly/SameSite), permissive CORS, headers (HSTS, XFO, XCTO, Referrer-Policy, CSP suggestion), exposed debug routes, and version age. Runs locally/CI with ✅/⚠️/❌ output and MD/HTML reports.

Active Directory multi-domain lab with PowerShell automation, OUs, GPOs, and DHCP/DNS configuration.

DevSec Nginx Baseline - InSpec Profile (CIS Benchmark Controls Added)

Windows-Server-Homelab zur Härtung von Active Directory: Security Policies per GPMC/ADAC – starke Kennwortrichtlinien, Kontosperrung, User Rights Assignment und Fine-Grained Password Policies (FGPP). Inklusive kurzer Tests, Validierung mit gpresult/RSOP und klarer, reproduzierbarer Dokumentation.

This Powershell Script compares your local Security Policies to the Microsoft Security Baseline.

Public, audit-ready security baseline with hardware root of trust, signed evidence, and CI-validated controls.

This repository is focused on collecting, organizing, and maintaining security hardening guidelines, practices, and references for various environments. The objective is to provide a centralized knowledge base to improve system security, reduce attack surfaces, and follow best practices for cybersecurity.

A Conditional Access framework for Microsoft Entra ID: a baseline is an operating model, not a set of JSON files. Personas + resource tiers, governed exceptions, TAP-first onboarding, ring enablement, and a shipped runbook.

Practical AWS Security best practices checklist covering IAM, Data Protection, Logging, Network Security, and Threat Detection.

Website for HardenLab

Local Linux hardening snapshot audit for SSH, sysctl, and privileged-account checks.

Practical tweaks & hardening via curated registry edits

Hardened AWS Terraform baseline: IAM least-privilege, S3 SSE-KMS, CloudTrail, security groups, KMS rotation. With tfsec + checkov CI.

Enterprise AWS Landing Zone with Terraform: Organizations, SCPs, CloudTrail, Config, GuardDuty and reusable governance modules.

12 AWS security controls every seed-stage startup should turn on this afternoon, and the 80 CIS controls you can skip until Series A. Opinionated Terraform module by MatrixGard.