Alternatives and similar repositories for systemd-service-hardening

Users that are interested in systemd-service-hardening are comparing it to the libraries listed below

• dev-sec / ssh-baseline
  DevSec SSH Baseline - InSpec Profile
  ☆287Updated last year
• frohoff / grepcidr
  from http://www.pc-tools.net/unix/grepcidr/
  ☆90Updated 8 years ago
• konstruktoid / ansible-role-hardening
  Ansible role to apply a security baseline. Systemd edition.
  ☆597Updated this week
• Scribery / tlog
  Terminal I/O logger
  ☆351Updated 8 months ago
• cloudlinux / kcare-uchecker
  A simple tool to detect outdated shared libraries
  ☆182Updated 2 months ago
• MaxKellermann / ferm
  ferm is a frontend for iptables
  ☆354Updated 3 years ago
• r-pufky / wireguard-initramfs
  Use dropbear over wireguard.
  ☆320Updated 6 months ago
• stoggi / sshrimp
  🦐SSH Certificate Authority in a Lambda (on the barbie)
  ☆119Updated 5 years ago
• liske / needrestart
  Restart daemons after library updates.
  ☆476Updated 6 months ago
• hardenedlinux / harbian-audit
  Hardened Debian GNU/Linux distro auditing
  ☆458Updated last year
• 89luca89 / terrible
  An Ansible playbook that applies the principle of the Infrastructure as Code on a QEMU/KVM environment.
  ☆257Updated 10 months ago
• linux-application-whitelisting / fapolicyd
  File Access Policy Daemon
  ☆227Updated last week
• sii / sipcalc
  Sipcalc is an advanced ip calculator supporting both IPv4 and IPv6.
  ☆348Updated 3 years ago
• containers / udica
  This repository contains a tool for generating SELinux security profiles for containers
  ☆550Updated 2 months ago
• meesaltena / SSHHeatmap
  Generates a heatmap of IP's that made failed SSH login attempts.
  ☆267Updated 10 months ago
• anedward01 / tpm2KeyUnlock
  Adds an automated unlock function based on TPM policy installation
  ☆68Updated 2 years ago
• benjojo / ssh-key-confirmer
  Test ssh login key acceptance without having the private key
  ☆216Updated 4 years ago
• FiloSottile / captive-browser
  A dedicated Chrome instance to log into captive portals without messing with DNS settings.
  ☆461Updated 2 years ago
• chiraag-nataraj / firejail-profiles
  Tight Firejail profiles
  ☆145Updated 6 years ago
• mikesmitty / curse
  CURSE is an SSH certificate signing server, built as an alternative to Netflix's BLESS tool, but without a dependency on AWS.
  ☆222Updated last year
• dev-sec / linux-baseline
  DevSec Linux Baseline - InSpec Profile
  ☆824Updated last year
• rackerlabs / auter
  Automatic updates for RHEL, Debian, and their derivatives, with the ability to run pre/post hooks & reboot afterwards.
  ☆70Updated 2 years ago
• whitecloud / ansible-styleguide
  Ansible styleguide used at WhiteCloud
  ☆152Updated 2 years ago
• morbitzer / linux-luks-tpm-boot
  A guide for setting up LUKS boot with a key from TPM in Linux
  ☆160Updated 5 years ago
• dev-sec / ansible-nginx-hardening
  This Ansible role provides secure nginx configurations.
  ☆190Updated 4 years ago
• latchset / tang
  Tang binding daemon
  ☆610Updated 7 months ago
• arekinath / pivy
  Tools for using PIV tokens (like Yubikeys) as an SSH agent, for encrypting data at rest, and more
  ☆209Updated 5 months ago
• githubixx / ansible-role-harden-linux
  Ansible role for hardening Linux
  ☆134Updated last year
• clearlinux / tallow
  Block hosts that attempt to bruteforce SSH using the journald API.
  ☆95Updated 2 months ago
• gsauthof / dracut-sshd
  Provide SSH access to initramfs early user space on Fedora and other systems that use Dracut
  ☆277Updated 2 months ago