HardeningKitty and Windows Hardening Settings

Enterprise-Grade Security & Privacy Hardening Tool for Windows 11 25H2

Public, audit-ready security baseline with hardware root of trust, signed evidence, and CI-validated controls.

DevSec Nginx Baseline - InSpec Profile (CIS Benchmark Controls Added)

Windows-Server-Homelab zur Härtung von Active Directory: Security Policies per GPMC/ADAC – starke Kennwortrichtlinien, Kontosperrung, User Rights Assignment und Fine-Grained Password Policies (FGPP). Inklusive kurzer Tests, Validierung mit gpresult/RSOP und klarer, reproduzierbarer Dokumentation.

This Powershell Script compares your local Security Policies to the Microsoft Security Baseline.

Practical AWS Security best practices checklist covering IAM, Data Protection, Logging, Network Security, and Threat Detection.

Active Directory multi-domain lab with PowerShell automation, OUs, GPOs, and DHCP/DNS configuration.

Laravel Secure Baseline provides a fast, non-destructive scan to detect security misconfigurations in Laravel 10/11: env vars, session/cookie flags (Secure/HttpOnly/SameSite), permissive CORS, headers (HSTS, XFO, XCTO, Referrer-Policy, CSP suggestion), exposed debug routes, and version age. Runs locally/CI with ✅/⚠️/❌ output and MD/HTML reports.

Automated security baseline compliance checking against CIS, NIST, DISA, PCI-DSS

This repository is focused on collecting, organizing, and maintaining security hardening guidelines, practices, and references for various environments. The objective is to provide a centralized knowledge base to improve system security, reduce attack surfaces, and follow best practices for cybersecurity.

AWS Account Security Baseline (CloudTrail, GuardDuty, MFA, Alerts) – reproduzierbarer Mindest-Sicherheitsstandard per Terraform & Python