Skip to content
Cybersecurity

Linux Server Hardening Tool

Automated hardening of Linux servers (Debian, Arch): firewall configuration, SSH hardening and audit logging.

PythonDebianArchFirewallSSH

Challenge

Freshly provisioned Linux servers are rarely hardened enough. Manual hardening is error-prone and hard to reproduce — a tool was needed that is automated and auditable.

Approach

  1. 01

    Automated firewall configuration by defined profiles.

  2. 02

    SSH hardening (key-only, hardened defaults).

  3. 03

    Audit logging of every change made.

  4. 04

    Support for Debian and Arch.

Outcome

  • Used in-house for reproducible server hardening.
  • Audit logs make changes traceable.
  • Release / repo link: {{TODO: repo or release link, if public}}.

▸ Some details (metrics, timeframes) are still to be confirmed.