Idempotent VPS hardening for Ubuntu — SSH, firewall, fail2ban, kernel tuning, auditd, SOPS secrets, and optional AI agent workspace security. Dry-run first, lockout protection built in.
-
Updated
Feb 18, 2026 - Shell
Idempotent VPS hardening for Ubuntu — SSH, firewall, fail2ban, kernel tuning, auditd, SOPS secrets, and optional AI agent workspace security. Dry-run first, lockout protection built in.
Complete Linux system hardening tool with 12+ security checks - CIS benchmark aligned
Complete Windows security hardening script with 15+ checks - CIS benchmark aligned
Add a description, image, and links to the hardening-script topic page so that developers can more easily learn about it.
To associate your repository with the hardening-script topic, visit your repo's landing page and select "manage topics."