#1Tools for reviewing system and application configurations for security weaknesses and compliance.
Kitploit recommended
imthenachoman/how-to-secure-a-linux-serverStep-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…
jumpserver/jumpserverJumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH,…
symfony/symfonyThe Symfony PHP framework
projectdiscovery/nucleiFast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…
certbot/certbotCertbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any…
thingsboard/thingsboardAll-in-one IoT Platform - Device management, data collection, processing and visualization.
infisical/infisicalInfisical is the open-source platform for secrets, certificates, and privileged access management.
aquasecurity/trivyFind vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
netbox-community/netboxOpen-source IPAM and DCIM platform providing a centralized source of truth for modeling, documenting, and automating network infrastructure with…
digitalocean/nginxconfig.io⚙️ NGINX config generator on steroids 💉
getsops/sopsSimple and flexible tool for managing secrets
prowler-cloud/prowlerProwler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.…
gravitational/teleportThe easiest, and most secure way to access and protect all of your infrastructure.
nvidia/openshellSandboxed runtime for autonomous AI agents with declarative YAML policies enforcing filesystem, network, and process constraints, plus endpoint-bound…
mail-in-a-box/mailinaboxMail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server…
mailcow/mailcow-dockerizedDockerized mail server suite with Postfix, Dovecot, Rspamd, and ClamAV. Provides secure email hosting with integrated spam filtering, antivirus, and…
decalage2/awesome-security-hardeningA collection of awesome security hardening guides, tools and other resources
