Linux Hardening
vez.mrsk.me/linux-hardening.htmlThis guide collects Linux kernel and userland settings for improving security and usability, targeting Arch Linux and potentially other distributions.
Looking for something like Qubes? Here are 24 alternatives, ranked by how closely they match it on purpose, features and platforms. Of these, 1 are free or have a free plan and 6 are open source.
Qubes OS is a free, open-source operating system for personal computers that uses compartmentalization as a security approach.
| # | Alternative | Pricing | Open source | Platforms |
|---|---|---|---|---|
| 1 | Linux Hardening | — | Not stated | Linux, Web |
| 2 | Tracee | — | Not stated | Linux, Web |
| 3 | Santa | — | Yes | macOS |
| 4 | macOS Privacy Guide | — | Yes | macOS |
| 5 | How to Secure a Linux Server | — | Not stated | Linux |
| 6 | USBGuard | — | Yes | Linux |
| 7 | Linux Hardening | — | Not stated | Linux, Web |
| 8 | DHS | — | Not stated | macOS, Web |
| 9 | OnionHop | — | Not stated | Linux, macOS, Web |
| 10 | Securely Wipe Disk | — | Not stated | Web |
This guide collects Linux kernel and userland settings for improving security and usability, targeting Arch Linux and potentially other distributions.
Tracee monitors runtime security events and supports forensic analysis with eBPF instrumentation.
Authorize binary execution and file access on macOS with Santa, a system extension and policy tool.
This community guide collects recommendations for improving security and privacy on macOS.
Follow this evolving guide for steps and configuration examples to secure a Linux server.
Set USB device authorization rules with USBGuard, a framework for controlling device access.
Follow this Linux hardening guide for steps to improve the security of a Linux system.
Dylib Hijack Scanner is a utility that scans a computer for applications that may be vulnerable to dylib hijacking.
OnionHop routes desktop traffic through Tor, with proxy and system-wide VPN modes, bridges, split tunneling, and a kill switch.
The ArchWiki guide covers securely wiping a disk, with related security articles and Arch Linux resources on the wiki.
Export personal data with Surfer Protocol, an open-source framework with a desktop app and Python SDK.
Hear when a computer sends requests to Google with Googerteller, which provides audible feedback about browsing activity.
Stay for Safari lists userscripts and ad blocking among its features, with ratings and reviews available on the App Store.
Use a YubiKey challenge-response at system startup to open a LUKS-encrypted disk volume.
The Tor Project promotes online anonymity and tools to defend against tracking, surveillance, and censorship.
Shufflecake is a Linux tool for creating multiple hidden filesystems with plausible deniability.
Check which software is persistently installed on a Mac with KnockKnock, a tool for inspecting startup items.
Tunnelblick is free, open-source macOS software for controlling OpenVPN connections, with downloads and support information on its site.
The MailTrackerBlocker extension for macOS Apple Mail blocks email trackers, read receipts, and tracking pixels.
Lockdown Privacy offers an open-source firewall for blocking trackers, ads, and badware in apps on iPhone and iPad.
Check file origin and cryptographic signing details from Finder with this macOS utility.
Use the WhoAmI Project to configure enhanced privacy and anonymity for Debian- or Arch-based Linux distributions.
BlockBlock monitors for malware that installs itself persistently to run automatically after a restart or login.
Consult ArchWiki guidance on clearing data from solid-state drives and memory cells.
Alternatives are suggested from the purpose and features described in our listings. Different pages for the same product appear once. Read each description to check whether it fits your task. How we choose alternatives · Suggest an alternative