DevSec Hardening Files

This Ansible collection provides battle tested hardening

This is an exact mirror of the DevSec Hardening project, hosted at https://github.com/dev-sec/ansible-collection-hardening. SourceForge is not affiliated with DevSec Hardening. For more information, see the SourceForge Open Source Mirror Directory.

The interactive file manager requires Javascript. Please enable it or use sftp or scp.
You may still browse the files here.

Name	Modified	Size	InfoDownloads / Week
Parent folder
10.4.0 source code.tar.gz	2025-10-22	145.3 kB	0
10.4.0 source code.zip	2025-10-22	258.2 kB	0
README.md	2025-10-22	4.9 kB	0
Totals: 3 Items		408.3 kB	0

Changelog

10.4.0 (2025-10-22)

Implemented enhancements:

Support Debian 13 #891
Support EL10 #870
Add support for current versions of Debian and EL #893 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (schurzi)
Add SSH config for EL/AlmaLinux 10 #888 [ssh_hardening] (jonathanspw)

Fixed bugs:

/etc/sysctl.conf is no longer honored in Debian 13 #905
Write sysctl config to separate file #907 [os_hardening] (schurzi)

Closed issues:

sysctl-34 - fs.protected_regular not set #536

Merged pull requests:

Update ArchLinux test environment before testing #908 [os_hardening] (schurzi)
chore(deps): update actions/setup-python action to v6 #901 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (renovate[bot])
chore(deps): update actions/labeler action to v6 #900 (renovate[bot])
chore(deps): update ansible/ansible-lint digest to 8861a73 #899 (renovate[bot])
chore(deps): update actions/checkout action to v5 #895 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (renovate[bot])
chore(deps): update dependency python to 3.13 #892 [mysql_hardening] [os_hardening] [ssh_hardening] [nginx_hardening] (renovate[bot])
chore(deps): update dependency aar-doc to v2.3.0 #890 (renovate[bot])
chore(deps): update ansible/ansible-lint digest to 9765b87 #889 (renovate[bot])
Improve OS support accuracy #887 (jonathanspw)
chore(deps): update hugo19941994/delete-draft-releases action to v2 #885 (renovate[bot])

Source: README.md, updated 2025-10-22

Other Useful Business Software

Gen AI apps are built with MongoDB Atlas Icon

Gen AI apps are built with MongoDB Atlas

Build gen AI apps with an all-in-one modern database: MongoDB Atlas

MongoDB Atlas provides built-in vector search and a flexible document model so developers can build, scale, and run gen AI apps without stitching together multiple databases. From LLM integration to semantic search, Atlas simplifies your AI architecture—and it’s free to get started.

Start Free

Level Up Your Cyber Defense with External Threat Management Icon

Level Up Your Cyber Defense with External Threat Management

See every risk before it hits. From exposed data to dark web chatter. All in one unified view.

Move beyond alerts. Gain full visibility, context, and control over your external attack surface to stay ahead of every threat.

Try for Free

Recommended Projects

lynis
Lynis is a battle-tested security tool for systems running Linux, macOS, or Unix-based operating system. It performs an extensive health scan of your systems to support system hardening and compliance testing. The project is open source software with the GPL license and available since 2007....
Heads
A minimal Linux that runs as a coreboot or LinuxBoot ROM payload to provide a secure, flexible boot environment for laptops, workstations, and servers. Heads is an open source custom firmware and OS configuration for laptops and servers that aims to provide slightly better physical security and...
Terrascan
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure. As you embrace Infrastructure as Code (IaC) such as Terraform, Kubernetes, Argo CD, Atlantis and AWS CloudFormation, it is important to ensure that security...
bitswitcher
BITswitcher is a firmware-developing-project for BCM96348GW based ADSL-Router like the Targa WR500 Voip or the Speedport W500V sold by Deutsche Telekom AG. There have been included many applications and an web-frontend to administrate the new functions.
Ultimate AppLocker Bypass List
UltimateAppLockerByPassList is a community-curated repository that collects known techniques, patterns, and candidate binaries that have been observed or proposed to bypass Microsoft AppLocker and similar executable control policies. The project functions as a living catalog: entries list...