cyberstars
cyberstars / action / harden

Tools that harden

Configure, audit or enforce a stronger baseline.

40 tools indexed

ShellHub

—

Remote SSH for the edge.

HardenMonitorNetworksEndpoints
TypeScriptApache-2.0

Teleport

—

Zero-trust access for SSH, K8s and more.

HardenMonitorNetworksCloud
GoAGPL-3.0

Teller

—

Cloud-native secrets manager.

HardenAutomateCloudSource code
RustApache-2.0

Tetragon

—

eBPF-based runtime security.

MonitorHardenCloudEndpoints
GoApache-2.0

Themis

—

Cross-platform data-protection framework.

HardenSource codeEndpoints
CApache-2.0

cnspec

—

Cloud-native security and compliance from build to runtime.

ScanHardenCloudIaC
Go

kube-bench

—

CIS benchmarks for Kubernetes.

ScanHardenCloud
GoApache-2.0

memguard-rs

—

Secure in-memory handling of secrets for Rust

HardenSource codeEndpoints
RustMIT

rage

—

Modern file encryption with age.

HardenEndpointsSource code
RustMIT

ssh-audit

—

SSH server and client config auditor.

ScanHardenNetworksEndpoints
PythonMIT

sshportal

—

Transparent SSH bastion.

HardenMonitorNetworksEndpoints
GoApache-2.0

step-ca

—

Private X.509 + SSH CA + ACME server.

HardenAutomateNetworksCloud
GoApache-2.0

sysmon-modular

—

Modular Sysmon configuration repo.

MonitorHardenEndpoints
PowerShellMIT

tfsec

—

Terraform static analysis.

ScanHardenIaCCloud
GoMIT

wolfSSL

—

Embedded TLS / DTLS library.

HardenEndpointsSource code
CGPL-2.0