DevSec Hardening Framework is an open-source project that provides Ansible, Chef, and Puppet automation for hardening operating systems and services. It offers baselines for applications (MySQL, PostgreSQL, Apache, Nginx), components (SSH, SSL, Docker, K8S), and Linux operating systems. The framework focuses on attack surface reduction, secure configuration, and hardening of core components, and was originally developed to automate security requirements at Deutsche Telekom.
What it's for
Identify security issues and misconfigurationRemediate with automation toolingAdd security hardening to an automation frameworkHarden operating systems and core servicesVerify compliance with hardening baselines
Features 16
- Ansible collection for hardening
- Apache hardening baseline
- Attack surface reduction
- Chef cookbooks for hardening
- Compliance testing rules for verifying applied hardening
- Core component hardening
- Docker hardening
- K8S hardening
- Linux OS hardening
- MySQL hardening baseline
- Nginx hardening baseline
- PostgreSQL hardening baseline
- Puppet modules for hardening
- Secure default configuration
- SSH hardening
- SSL hardening
At a glance
free tieropen sourceself-hostable
TypeLibrary / SDK
DeploymentSelf-hosted
PlatformsLinux
Integrations
ChefInSpecAnsiblePuppet
Similar apps
Chef InSpecPriceNot statedTry free—Runs on—Features7
OpenSCAPOpen sourceImprove security of your infrastructure using open source tools.PriceNot statedTry freeFree planRuns on—Features14
LynisOpen sourceSecurity auditing, system hardening, and compliance monitoringPriceFrom $3/moTry freeFree planRuns onLinux · macOS +1Features15
CIS-CAT Pro AssessorConfiguration assessment tool for assessing system conformance to CIS BenchmarksPriceOn requestTry freeFree trialRuns on—Features3
SecuryBlackThe control panel that should have come with your VPSPrice$12–$39/moTry freeFree planRuns onWeb · Linux +2Features19
DefensiaSelf-hostableLinux Server Security, AutomatedPriceFrom €9/moTry freeFree planRuns onLinux · WebFeatures19