Automated hardening of Linux servers (Debian, Arch): firewall configuration, SSH hardening and audit logging.
PythonDebianArchFirewallSSH
▸Linux Server Hardening ToolCybersecurity · Screenshot pending
Challenge
Freshly provisioned Linux servers are rarely hardened enough. Manual hardening is error-prone and hard to reproduce — a tool was needed that is automated and auditable.
Approach
01
Automated firewall configuration by defined profiles.
02
SSH hardening (key-only, hardened defaults).
03
Audit logging of every change made.
04
Support for Debian and Arch.
Outcome
Used in-house for reproducible server hardening.
Audit logs make changes traceable.
Release / repo link: {{TODO: repo or release link, if public}}.
▸ Some details (metrics, timeframes) are still to be confirmed.