Tools that harden

Self-hosted open-source WAF.

Multi-cloud security auditing.

Remote SSH for the edge.

Battle-tested Sysmon configuration.

Zero-trust access for SSH, K8s and more.

Cloud-native secrets manager.

eBPF-based runtime security.

Cross-platform data-protection framework.

Cloud-native security and compliance from build to runtime.

Audit Keycloak configuration for security misconfigurations

CIS benchmarks for Kubernetes.

Secure in-memory handling of secrets for Rust

Modern file encryption with age.

Lightweight firewall that drives the Windows Filtering Platform directly.

SSH server and client config auditor.

Transparent SSH bastion.

Private X.509 + SSH CA + ACME server.

Modular Sysmon configuration repo.

Terraform static analysis.

Embedded TLS / DTLS library.