Configuration Auditing

dev-sec/chef-os-hardening

This chef cookbook provides numerous security-related configurations, providing all-round base protection.

ssc-ict-innovatie/nl-kat-coordination

Modular network scanning framework that integrates diverse tools and external databases to detect vulnerabilities and configuration errors, producing…

aerleon/aerleon

Generate firewall ACLs for Cisco, Juniper, Palo Alto, and more from a single YAML policy language via CLI or Python API.

isecpartners/sslyze

Current development of SSLyze now takes place on a separate repository

manuelschipper/nah

a guard that blocks catastrophic agent actions

cloudgraphdev/cli

The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.

aquasecurity/chain-bench

Audits software supply chain security compliance against the CIS benchmark, scanning SCM settings, branch protections, dependencies, and CI/CD…

batfish/pybatfish

Python client for Batfish, a network configuration analysis tool that validates security, reliability, and compliance by modeling network behavior…

chainguard-dev/osquery-defense-kit

Production-ready detection & response queries for osquery

michelin/chopchop

YAML-driven CLI scanner that detects exposed services, files, and folders on web endpoints. Designed for developers to integrate security checks into…

optiopay/klar

Integration of Clair and Docker Registry

shirkdog/pulledpork

Pulled Pork for Snort and Suricata rule management (from Google code)

hardenedlinux/harbian-audit

Hardened Debian GNU/Linux distro auditing

vulnerscom/zabbix-threat-control

Zabbix vulnerability assessment plugin

korben00/no-gdid

Read, understand and silence the Windows GDID device identifier (the ID that tracked a hacker through a VPN). Verified on a real Win11 VM. Honest: it…

secforce/snmp-brute

Fast SNMP brute force, enumeration, CISCO config downloader and password cracking script.

dev-sec/chef-ssh-hardening

This chef cookbook provides secure ssh-client and ssh-server configurations.