Hardening

Hardening Atlas

Prioritised hardening checklists across application, API, website, container, Kubernetes, cloud, database, DevOps, DevSecOps, IoT and kiosk surfaces - each broken into concrete, ordered steps.

89
Controls: 12
Guides: 20
Critical: 12
Categories

Refine the index

Search the collection, then narrow it by the fields below.

Surface

Priority

Showing 89 of 89 controls

Showing 24 of 89

Input Validation Baseline

AuthN / Session Protection

Secure Secret and Config Handling

Defensive Headers and CSP

Dependency and Supply Chain Security

Error Handling and Logging Security

API AuthZ and BOLA Defense

API Abuse and Rate Control

Strict API Schema Validation

API Observability and Alerting

API Gateway and WAF Integration

API Versioning and Deprecation Security

GraphQL Security Hardening

TLS Certificate Management

Security Headers Baseline

Content Security Policy Hardening

CI/CD Security Gates

Supply Chain and SBOM Control

IaC Misconfiguration Scanning

Pre-Commit Secret Detection

DAST and Dynamic Testing Automation

Runtime Container Lockdown

Container Image Hygiene

Container Network Segmentation

Admission Policy Enforcement

Container Secrets Management

Database Access Control

Database Encryption at Rest

Database Audit Logging

Backup Security and Recovery

IoT Device Credential Management

IoT Firmware and Update Security

IoT Network Service Hardening

IoT Ecosystem API Security

IoT Device Lifecycle Management

IoT Protocol Security (MQTT/CoAP)

Kiosk Application Lockdown

Kiosk Browser Hardening

Kiosk Peripheral and Session Security

Kiosk Network Isolation

Kiosk Integrity Monitoring

Pipeline Security Hardening

Build Environment Isolation

Artifact Integrity Verification

Deployment Pipeline Least Privilege

Kubernetes Network Policy Hardening

GitOps Security Controls

Cloud IAM Least Privilege

Cloud Storage Security

Cloud Network Security

Cloud Secrets Management

Cloud Security Posture Management

Cloud Workload Protection

Multi-Cloud Security Posture

Serverless Security Hardening

Pod Security Standards Enforcement

Kubernetes RBAC Hardening

Kubernetes API Server Security

Kubernetes Secrets Management

Security Logging Best Practices

API Documentation Security

DevSecOps Training Programs

Container Image Optimization

Database Index Optimization

IoT Device Firmware Updates

Kiosk Accessibility Features

Cloud Cost Optimization

Website Performance Monitoring

Kubernetes Dashboard Security

File Upload Hardening

SSRF Egress Controls

Webhook Signature Verification

API Key and Token Lifecycle

Cookie Security Attributes

Email Domain Authentication

Branch Protection and Signed Commits

Rootless and Distroless Images

Database Network Exposure Control

Secure Boot and Hardware Root of Trust

Kiosk Remote Management Security