Build software better, together

trimstray / the-practical-linux-hardening-guide

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

linux linux-hardening linux-security security hardening audit guide manual checklist cis pci-dss openscap redhat-enterprise-linux centos

Updated Mar 4, 2019

CISOfy / lynis

5.7k

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27…

Shell Updated Mar 21, 2019 2 issues need help

ossec / ossec-hids

2.5k

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, po…

hids security pci-dss nist800-53 ossec compliance intrusion-detection fim loganalyzer policy-monitoring file-integrity-management

C Updated Mar 13, 2019

wazuh / wazuh

820

Wazuh - Host and endpoint security

wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response

C Updated Mar 22, 2019 2 issues need help

ComplianceAsCode / content

615

Security compliance content in SCAP, Bash, Ansible, and other formats

Python Updated Mar 22, 2019 11 issues need help

wazuh / wazuh-ruleset

177

Wazuh - Ruleset

wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response

Python Updated Mar 22, 2019

wazuh / wazuh-kibana-app

77

Wazuh - Kibana plugin

JavaScript Updated Mar 22, 2019 1 issue needs help

wazuh / wazuh-docker

75

Wazuh - Docker containers

wazuh docker ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap security-hardening log-analysis ids pci-dss file-integrity-management security-awareness vulnerability-detection incident-response

Shell Updated Mar 22, 2019

citybasebrooks / SIAC

51

SIAC is an enterprise SIEM built on open-source technology.

siem security elk osquery intrusion-detection secdevops pci-dss fim compliance wazuh incident-response aws

Updated Oct 31, 2018

wazuh / wazuh-documentation

47

Wazuh - Project documentation

wazuh documentation reference ossec openscap elasticsearch monitoring security security-hardening pci-dss file-integrity-management compliance security-awareness log-analysis fim loganalyzer intrusion-detection vulnerability-detection incident-response

Python Updated Mar 22, 2019

wazuh / wazuh-ansible

35

Wazuh - Ansible playbook

wazuh ansible ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response

Updated Mar 22, 2019

wazuh / wazuh-api

33

Wazuh - RESTful API

wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response

JavaScript Updated Mar 21, 2019

AvyanConsultingCorp / pci-paas-webapp-ase-sqldb-appgateway-keyvault-oms

32

Azure PCI PaaS Reference Architecture

reference-architecture azure compliance pci-dss pci azure-paas gartner paas infrastructure reference-architecture-diagram decision-maker azure-governance governance cloud security azure-security microsoft

HTML Updated Dec 14, 2017

Azure / pci-paas-webapp-ase-sqldb-appgateway-keyvault-oms

24

Azure Security and Compliance Blueprint - automation pci-paas-webapp-ase-sqldb-appgateway-keyvault-oms

azure pci-dss

PowerShell Updated Jul 18, 2018

wazuh / wazuh-splunk

16

Wazuh - Splunk app

wazuh ossec security loganalyzer compliance monitoring policy-monitoring splunk openscap security-hardening intrusion-detection ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection gdpr

Python Updated Mar 22, 2019

Atomicorp / openvas-docker

14

A docker container for openvas

openvas scanner docker security fips-140-2 pci-dss nist800-53 gdpr

TeX Updated Jul 24, 2018

Microsoft / MCW-Securing-PaaS

12

MCW Securing PaaS

mcw paas app-service-environment azure-key-vault azure-security-center cosmos-db cosmosdb pci-dss aad-b2c web-app api-apps sql-database vnet rbac azure-search nsg

C# Updated Dec 26, 2018

Microsoft / MCW-Modern-cloud-apps

12

MCW Modern cloud apps

mcw azure app-service vsts aad app-insights pci-dss sql-database data-factory sql-data-warehouse logic-apps api-management on-premises

Updated Jan 17, 2019

wazuh / wazuh-packages

12

Wazuh - Tools for packages creation

wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response

Shell Updated Mar 20, 2019

wazuh / wazuh-cloudformation

8

Wazuh - Amazon AWS Cloudformation

security elasticsearch incident-response wazuh ossec log-analysis monitoring policy-monitoring openscap security-hardening pci-dss ids file-integrity-monitoring security-awareness vulnerability-detection

Shell Updated Mar 20, 2019

wazuh / wazuh-puppet

7

Wazuh - Puppet module

wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response puppet

Puppet Updated Jan 31, 2019

Atomicorp / nginx-waf-docker

7

docker modsecurity reverse proxy WAF based on nginx

nginx waf modsecurity modsecurity-nginx libmodsecurity docker docker-image security proxy pci-dss nist800-53 gdpr intrusion-detection intrusion-prevention virtual-patching

Shell Updated Mar 13, 2018

gjyoung1974 / kolide-fleet-chart

6

kolide-fleet-chart Chart for Kubernetes includes kolide-fleet, MySQL Database and Redis cache

security instrumentation host-instrumentation infosec threat-intelligence threat-hunting operations-research compliance compliance-as-code pci-dss indicators-of-compromise operations-management

Smarty Updated Mar 4, 2019

wazuh / wazuh-chef

5

Wazuh - Chef cookbooks

wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response chef

Ruby Updated Oct 9, 2018

Mondido / net-sdk

4

Mondido Payments SDK for .NET

csharp dotnet mono nuget payments betalningar e-commerce pci-dss

C# Updated Jul 24, 2018

captbrando / PCIFunding

4

pci-dss

HTML Updated Jul 18, 2018

Atomicorp / ossec-docker

3

Official OSSEC docker container

ossec-docker ossec ossec-server intrusion-detection loganalyzer file-integrity-management pci-dss gdpr nist800-53 compliance monitoring docker-container docker vulnerability-detection

Shell Updated Oct 18, 2017

Centurix / Pantastic

3

Credit Card PAN scanner.

visa mastercard amex pan scanner credit-card creditcard pci pci-dss

Python Updated Mar 17, 2017

processout / processout.js

3

ProcessOut JavaScript library with modal & white-label support

library frontend pci-dss

TypeScript Updated Mar 12, 2019

serverfarmer / compliance

2

Tools related to Server Farmer compliance with GDPR, PCI DSS, HIPAA and/or other regulations.

pci-dss hipaa gdpr compliance linux security server-management

Shell Updated Jul 7, 2018

Feb	MAR	Apr
	22
2018	2019	2020

Please note that GitHub no longer supports Internet Explorer.

pci-dss

Repositories 44

trimstray / the-practical-linux-hardening-guide

CISOfy / lynis

ossec / ossec-hids

wazuh / wazuh

ComplianceAsCode / content

wazuh / wazuh-ruleset

wazuh / wazuh-kibana-app

wazuh / wazuh-docker

citybasebrooks / SIAC

wazuh / wazuh-documentation

wazuh / wazuh-ansible

wazuh / wazuh-api

AvyanConsultingCorp / pci-paas-webapp-ase-sqldb-appgateway-keyvault-oms

Azure / pci-paas-webapp-ase-sqldb-appgateway-keyvault-oms

wazuh / wazuh-splunk

Atomicorp / openvas-docker

Microsoft / MCW-Securing-PaaS

Microsoft / MCW-Modern-cloud-apps

wazuh / wazuh-packages

wazuh / wazuh-cloudformation

wazuh / wazuh-puppet

Atomicorp / nginx-waf-docker

gjyoung1974 / kolide-fleet-chart

wazuh / wazuh-chef

Mondido / net-sdk

captbrando / PCIFunding

Atomicorp / ossec-docker

Centurix / Pantastic

processout / processout.js

serverfarmer / compliance