vcsa-hardening-tool
mandiant/vcsa-hardening-toolAutomated Zero Trust hardening and forensic auditing for VMware vCenter Server Appliance (VCSA)
authenticationcloud-infrastructure-securityconfiguration-auditing+9
13
mandiant/vcsa-hardening-toolAutomated Zero Trust hardening and forensic auditing for VMware vCenter Server Appliance (VCSA)
cyb3rint3l-labs/serversecurityauditPowerShell-based Windows Server Security Audit Engine by Cyb3rint3l Labs. Measures alignment with the NIS2 directive and maps findings to MITRE…
sh00bx/cve-2025-4615Technical analysis and proof-of-concept exploit for CVE-2025-4615, a newline injection vulnerability in PAN-OS management interface enabling…
certbot/certbotAutomated ACME client for obtaining and renewing Let's Encrypt TLS/SSL certificates, with plugins to deploy HTTPS on Apache, Nginx, and other web…
thingsboard/thingsboardOpen-source IoT Platform - Device management, data collection, processing and visualization.
infisical/infisicalOpen-source platform for secrets, certificates, and privileged access management with secret scanning, dynamic secrets, PKI, and CI/CD integrations.…
gravitational/teleportThe easiest, and most secure way to access and protect all of your infrastructure.
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
getsops/sopsSimple and flexible tool for managing secrets
prowler-cloud/prowlerProwler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.…
imthenachoman/how-to-secure-a-linux-serverStep-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…
jumpserver/jumpserverOpen-source Privileged Access Management (PAM) platform providing on-demand, audited access to SSH, RDP, Kubernetes, databases, and RemoteApp…
mailcow/mailcow-dockerizedDockerized mail server suite with Postfix, Dovecot, Rspamd, and ClamAV. Provides secure email hosting with integrated spam filtering, antivirus, and…
projectdiscovery/nucleiFast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…
aquasecurity/trivyFind vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
bridgecrewio/checkovStatic analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…
kyverno/kyvernoEnforce security and compliance on Kubernetes clusters via admission controls, resource mutation, background scans, and container image signature…
cloud-custodian/cloud-custodianRules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources