A collection of awesome security hardening guides, tools and other resources

HardeningKitty and Windows Hardening Settings

This Ansible role provides windows hardening configurations for the DevSec Windows baseline profile.

Enterprise-Grade Security & Privacy Hardening Tool for Windows 11 25H2

C# Based GUI for Windows-Optimize-Harden-Debloat

A collection of awesome security hardening software, libraries, learning tutorials & documents, e-books, best practices, checklists, benchmarks about hardening in Cybersecurity

Windows and macOS Hardening Interface to make security more accessible.

Hardened Windows Server image

Barikade is a Windows Service to close processes running outside allowed directories followed by network connections blocking to prevent the use of legit software to bypass Windows Firewall and download malware.

Python tool to audit Windows 10/11/Server against CIS Benchmarks. 1000+ checks, HTML/JSON reports.

Windows 10/11 registry tweaks toolkit — 7,718 tweaks, debloater, privacy hardening, performance optimizer, security hardening, group policy alternative, compliance audit. WinForms GUI + CLI. .NET 10, C# 13. Open source.

Directory for Windows ISO-Tweaks

IT Infrastructure Hardening Automation

This project will be used to create a program that can easily secure a Windows and Linux computer.

One script. 150+ checks. Harden Windows 10/11 in minutes. Interactive TUI with audit scoring, Defender ASR rules, telemetry removal, bloatware cleanup, and CIS benchmark coverage.

Identify and provide details on listening services in a Windows system

Hardening and Auditing Windows OS.

best optimizer for Windows

WinLocksmith - Windows System Hardening Script Generator, A sys admin's swiss knife, Open-source Intune alternative for Windows Administration. Generate PowerShell scripts to apply business restrictions, lock down workstations, and configure Kiosk mode on Windows 10/11—no MDM subscription required.

Modular PowerShell toolkit for hardening Windows 10/11 workstations