Sign in Book a Demo

Ansible Collection - devsec.hardening

Threat Defense Vulnerability Management

Pricing: Free

Visit Website ↗

Ansible Collection - devsec.hardening

What is Ansible Collection - devsec.hardening

Scans Alpine base images for vulnerabilities using Multi Stage builds in Docker 17.05

This collection provides effective hardening techniques for various systems

This collection provides effective hardening techniques for the following systems: * Linux operating systems: CentOS versions 7, 8, and 9; Rocky Linux versions 8 and 9; Debian versions 10, 11, and 12; Ubuntu versions 18.04, 20.04, and 22.04; Amazon Linux (some roles supported); Arch Linux (some roles supported); Fedora versions 37 and 38; Suse Tumbleweed (some roles supported). * MySQL MariaDB versions >= 5.5.65, >= 10.1.45, and >= 10.3.17. * MySQL versions >= 5.7.31 and >= 8.0.3. * Nginx version 1.0.16 or later. * OpenSSH version 5.3 and later.

Understanding the Purpose of Hardening

The hardening process is designed to meet the Inspec DevSec Baselines, which can be accessed at the following links: - https://github.com/dev-sec/linux-baseline - https://github.com/dev-sec/mysql-baseline - https://github.com/dev-sec/nginx-baseline - https://github.com/dev-sec/ssh-baseline If you are searching for the older roles, they are now part of the hardening-collection. We have retained previous versions of the os-hardening role in this repository, allowing you to locate them by browsing older tags.

The most recent standalone role release is version 6

The version number for the last release of the standalone role is 2.0.

Additional Roles are Located in...

The additional roles can be found in separate archive repositories: apache_hardening, mysql_hardening, nginx_hardening, ssh_hardening, and windows_hardening. Minimum required Ansible version: Ansible >= 2.9.10 Included content: os_hardening, mysql_hardening, nginx_hardening.

Ansible Collection - devsec.hardening Reviews

No reviews yet.

Similar Tools

Free
Vulnerability Management

Vulcan Cyber

Vulcan Cyber, now part of Tenable, revolutionizes enterprise cyber risk reduction by automating and orchestrating the entire vulnerability remediation lifecycle from detection to resolution. It empowers organizations to adopt agile security practices through dynamic, scalable processes, adaptive planning, and continuous remediation, enabling rapid and flexible responses to exposures and risks.

End-to-end vulnerability remediation automationDynamic and scalable orchestrationAdaptive planning for risk management
Free
Vulnerability Management

Seemplicity

Seemplicity empowers security teams to streamline and scale risk reduction efforts through an integrated platform. By automating, optimizing, and centralizing security workflows, Seemplicity enables intelligent communication between tools, teams, and assets. This ultimately leads to a more efficient, collaborative, and agile security posture, regardless of an organization's current program maturity.

Automated risk reduction workflowsCentralized security operations workspaceIntelligent tool, team, and asset communication
Free
Vulnerability Management

Opus

Opus empowers organizations to proactively manage and mitigate cloud security risks through a unified platform for defining, orchestrating, and automating remediation processes. By integrating seamlessly with existing cloud and security tools, Opus offers comprehensive visibility and centralized management of security findings across distributed environments. It equips SecOps teams with pre-built playbooks and best practices to automate the resolution of complex security issues, continuously measuring and improving remediation effectiveness for enhanced security posture.

Unified cloud security risk management platformAutomated remediation process orchestrationSeamless integration with existing security tools
Free
Vulnerability Management

DefectDojo

DefectDojo is a comprehensive DevSecOps and vulnerability management platform designed to streamline your application security program. It empowers teams to centralize security findings, manage product and application data, and efficiently triage vulnerabilities. With over 150 security tool integrations and seamless bi-directional JIRA synchronization, DefectDojo provides a single source of truth for all your security intelligence, enabling faster remediation and improved security posture.

Comprehensive Vulnerability ManagementDevSecOps AutomationExtensive Security Tool Integrations (150+)
Free
Vulnerability Management

Censys

Censys provides comprehensive, near real-time global visibility into your attack surface, empowering security and IT teams to proactively identify and mitigate risks. Leveraging trusted security data and researcher expertise, Censys Enterprise delivers actionable insights to defend your infrastructure against nation-state attacks, emerging threats, and common vulnerabilities, akin to having an expert security research team dedicated to your assets.

Comprehensive attack surface visibilityNear real-time threat intelligenceProactive risk identification and mitigation

Do not let AI keep
recommending someone else

Start your 7-day free trial and get your AI Visibility Score in about a minute. See exactly where you stand, where competitors are beating you, and the ranked fixes to get into the answer. Cancel anytime before the trial ends.

Start Your 7-Day Free Trial Book a Live Demo

7-day free trial. Cancel anytime before it ends. Trusted by 500+ B2B SaaS teams.

Partnered with
Powered by