How to Secure a Linux Server
github.com/imthenachoman/How-To-Secure-A-Linux…Follow this evolving guide for steps and configuration examples to secure a Linux server.
Looking for something like Linux Hardening? Here are 24 alternatives, ranked by how closely they match it on purpose, features and platforms. Of these, 2 are free or have a free plan and 3 are open source.
Follow this Linux hardening guide for steps to improve the security of a Linux system.
| # | Alternative | Pricing | Open source | Platforms |
|---|---|---|---|---|
| 1 | How to Secure a Linux Server | — | Not stated | Linux |
| 2 | Qubes | — | Not stated | Web |
| 3 | Linux Hardening | — | Not stated | Linux, Web |
| 4 | OnionHop | — | Not stated | Linux, macOS, Web |
| 5 | Tracee | — | Not stated | Linux, Web |
| 6 | Securely Wipe Disk | — | Not stated | Web |
| 7 | Yubikey Full Disk Encryption | — | Yes | Linux |
| 8 | ShuffleStacks | — | Not stated | Linux, Web |
| 9 | WhoAmI Project | — | Not stated | Linux, Web |
| 10 | Collision | — | Not stated | Linux, Web |
Follow this evolving guide for steps and configuration examples to secure a Linux server.
Qubes OS is a free, open-source operating system for personal computers that uses compartmentalization as a security approach.
This guide collects Linux kernel and userland settings for improving security and usability, targeting Arch Linux and potentially other distributions.
OnionHop routes desktop traffic through Tor, with proxy and system-wide VPN modes, bridges, split tunneling, and a kill switch.
Tracee monitors runtime security events and supports forensic analysis with eBPF instrumentation.
The ArchWiki guide covers securely wiping a disk, with related security articles and Arch Linux resources on the wiki.
Use a YubiKey challenge-response at system startup to open a LUKS-encrypted disk volume.
Shufflecake is a Linux tool for creating multiple hidden filesystems with plausible deniability.
Use the WhoAmI Project to configure enhanced privacy and anonymity for Debian- or Arch-based Linux distributions.
Collision checks file hashes on Linux, with installation available through Flathub.
Tomb makes strong encryption easier for everyday use by creating locked folders that can be transported and hidden in a filesystem.
Freenet offers peer-to-peer apps that operate without company control or dedicated servers, according to the project site.
Hyphanet provides information and downloads for a project focused on protecting internet privacy.
Stay for Safari lists userscripts and ad blocking among its features, with ratings and reviews available on the App Store.
Authorize binary execution and file access on macOS with Santa, a system extension and policy tool.
This community guide collects recommendations for improving security and privacy on macOS.
The Tor Project promotes online anonymity and tools to defend against tracking, surveillance, and censorship.
Check which software is persistently installed on a Mac with KnockKnock, a tool for inspecting startup items.
Tunnelblick is free, open-source macOS software for controlling OpenVPN connections, with downloads and support information on its site.
The MailTrackerBlocker extension for macOS Apple Mail blocks email trackers, read receipts, and tracking pixels.
Lockdown Privacy offers an open-source firewall for blocking trackers, ads, and badware in apps on iPhone and iPad.
Check file origin and cryptographic signing details from Finder with this macOS utility.
BlockBlock monitors for malware that installs itself persistently to run automatically after a restart or login.
Consult ArchWiki guidance on clearing data from solid-state drives and memory cells.
Alternatives are suggested from the purpose and features described in our listings. Different pages for the same product appear once. Read each description to check whether it fits your task. How we choose alternatives · Suggest an alternative