windows-hardening 开源项目推荐（70 个）

decalage2 /awesome-security-hardening

精选的安全加固指南、工具及其他资源合集

0x6d69636b /windows_hardening

HardeningKitty and Windows Hardening Settings

0x000NULL /CSSR

Repository of practice, guides, list, and scripts to help with cyber security.

NexusOne23 /noid-privacy

🛡️ Security & Privacy Hardening Tool for Windows 11 26H2 — 630+ Settings, 7 Modules, BAVR Pattern.

dev-sec /ansible-windows-hardening

This Ansible role provides windows hardening configurations for the DevSec Windows baseline profile.

KBT096 /windows-secure-toolkit

Local Windows security auditing and reversible hardening with a C#/.NET Framework 4.8 core and CMD/BAT entry points.

simeononsecurity /Windows-Optimize-Harden-Debloat-GUI

C# Based GUI for Windows-Optimize-Harden-Debloat

paulveillard /cybersecurity-security-harderning

A collection of awesome security hardening software, libraries, learning tutorials & documents, e-books, best practices, checklists, benchmarks about hardening in Cybersecurity

CRYPT-ON-IT /policies_hardening_interface

Windows and macOS Hardening Interface to make security more accessible.

gjyoung1974 /hardened-windows-server

Hardened Windows Server image

hexorcist404 /apotrope

Offline, single-executable Windows security posture auditor. 50+ CIS-mapped checks, a 0–100 score, and a self-contained HTML report. No cloud, no agent. MIT.

RajwanYair /RegiLattice

Windows 10/11 registry tweaks toolkit — 7,718 tweaks, debloater, privacy hardening, performance optimizer, security hardening, group policy alternative, compliance audit. WinForms GUI + CLI. .NET 10, C# 13. Open source.

Amrkadry /Amrs-ATM-Assessment

Amr's ATM Assessment - read-only PowerShell collector for authorised NCR Personas / APTRA ATM security assessments. 15 phases: XFS service-provider integrity and live CDM interaction, Radmin hash extraction, cardholder data at rest, kiosk-breakout posture, privesc, disk encryption. Masks PANs by default; exports JSON findings.

frangelbarrera /WinSecureAuditor

Python CIS Benchmark auditor for Windows 10, Windows 11, and Windows Server, with security configuration checks and HTML/JSON compliance reports.

ObsidianCorps /windows-hardening

One script. 150+ checks. Harden Windows 10/11 in minutes. Interactive TUI with audit scoring, Defender ASR rules, telemetry removal, bloatware cleanup, and CIS benchmark coverage.

cdhtlr /Barikade

Barikade is a Windows Service to close processes running outside allowed directories followed by network connections blocking to prevent the use of legit software to bypass Windows Firewall and download malware.

SD-ITLab /OptimizeWindows

Directory for Windows ISO-Tweaks

mbd3v /CP_Scripts2

This project will be used to create a program that can easily secure a Windows and Linux computer.

Luysky /HardeningKitty-LiaisonOfficer

IT Infrastructure Hardening Automation

briangeis /windows-hardening

PowerShell toolkit for hardening Windows 11 on standalone devices, with NIST SP 800-53 and 800-171 control mappings