OSINT Framework
Loading security resources…
OWASP — Open Worldwide Application Security Project
Practical standards, testing guidance and reference material for building and assessing secure web, API and mobile applications.
Personal Security Checklist
Practical references for strengthening personal digital security, privacy, account hygiene and device protection.
Network Security & Scanning Tools
Tools and references for network discovery, packet analysis, vulnerability assessment and infrastructure mapping.
System Hardening & CIS Benchmarks
Best practices and benchmarks for hardening systems and improving security posture.
- CIS Benchmarks Guide (French) — Security Configuration Benchmarks
- CIS Benchmarks Official Site
- System Hardening Guides (French)
- DevSec Hardening Framework
- OpenSCAP — Security compliance and configuration assessment
- Lynis — Security auditing and hardening tool for Unix-based systems
- Ansible Collection Hardening (dev-sec)
- VM Hardening with OpenSCAP & Ansible (Medium)
- Automated System Hardening & Security Audit Script (Medium)
SSH Security & Hardening
Comprehensive guides for securing SSH access and hardening SSH configurations.
- SSH Hardening Guide (French) — Complete SSH Security Tutorial
- SSH.COM Security Guide
- Mozilla ssh_scan — SSH configuration scanner
- ssh-audit — SSH server and client configuration auditor
- Mozilla OpenSSH Security Guidelines
- NVIDIA OpenShell — AI page (sandboxed agent runtime)
- Open Terminal — AI page (self-hosted terminal API for agents)
OpenClaw security hardening
Hardening guidance for self-hosted agentic AI, from minimum isolation and gateway controls to defense-in-depth with egress filtering and rootless runtimes.
Security Standards & Compliance
Industry standards, compliance frameworks and regulatory guidance for security governance.
- NIST Cybersecurity Framework
- ISO/IEC 27001 — Information Security Management
- ISO/IEC 42001 — Artificial Intelligence Management System
- PCI DSS — Payment Card Industry Data Security Standard
- GDPR — General Data Protection Regulation
- Drata — continuous compliance automation (SOC 2, ISO 27001 and more)
- Vanta — automated compliance, evidence collection and trust management
Vulnerability Management & Scanning
Tools and resources for identifying, assessing and managing vulnerabilities.
- National Vulnerability Database (NVD)
- CVE — Common Vulnerabilities and Exposures
- OpenCVE (Nabla-org) — Critical and High CVE monitoring
- CISA Known Exploited Vulnerabilities Catalog
- Trivy — comprehensive security scanner
- OWASP ZAP — web application security scanner
- OSTE Meta Scan — multi-scanner vulnerability tool
- TheAuditor — AI-powered SAST security tool
CI Vulnerability Scanning
Multi-scanner analysis and delivery-pipeline assessment tools.
Pentest-Tools.com
Online penetration testing and vulnerability scanning platform.
SIEM / Malware Detection
Security monitoring and malware detection resources.
DevSecOps Tools & Practices
Tools and practices for integrating security into the DevOps delivery pipeline.
- FluxCD — encrypting secrets with HashiCorp Vault and SOPS
- FastAPI security without slowness
- MegaLinter — multi-language linter
- Trivy — vulnerability and misconfiguration scanner
- Gitleaks — detect secrets in repositories and files
- pre-commit — Git hooks for preventive checks
- Bandit — security linter for Python
- pre-commit-terraform — Terraform and Terragrunt hooks
- Checkov — IaC and container security
- KICS — security and misconfiguration scanning for IaC
- Hadolint — Dockerfile linter
- CNCF TAG Security
- CodeQL — semantic code analysis engine
- Semgrep — static analysis
- TruffleHog — secret discovery
- GitGuardian — secrets scanning and remediation
Authentication & JWT
Boilerplates and guides for secure authentication and JWT.
App & Infrastructure Security
Best practices for securing applications and infrastructure platforms.
Cloud Security Resources
Best practices and tools for securing cloud infrastructure and services.
Security Learning Resources
Platforms and resources for learning and improving security skills.
OSINT Framework & Kali Linux
