cleanstart/envoy

CleanStart

Secure by Design, Built for Speed, Hardened Container Images on a minimal base CleanStart OS.

cleanstart/consul

CleanStart

Secure by Design, Built for Speed, Hardened Container Images on a minimal base CleanStart OS.

FRRouting

Docker Hardened Image

FRRouting (FRR) is a free and open source routing protocol suite supporting BGP, OSPF, IS-IS, RIP, EIGRP, LDP, BFD, Babel, PIM, VRRP, NHRP, and PBR. This Docker Hardened Image provides FRR routing daemons with vtysh CLI for network routing, management, and protocol implementation in a security-focused container.

tinyproxy - a light-weight HTTP/HTTPS proxy daemon for POSIX operating systems

MicroSocks - multithreaded, small, efficient SOCKS5 server

modernised vimbadmin on php8.5, hardened

This container provides secure, temporary access to internal networks through SSH port forwarding.

Hardened WGDashboard (WireGuard UI) Docker Image with optional AmneziaWG and Tor integration.

🧅 Hardened Tor Bridge, Relay & Exit Relay with diagnostics & auto-healing

🚢 Hardened Traefik Proxy setup for Docker/Podman with automated local PKI/SSL engine.

All-in-one Eclipse Zenoh container image based on Docker Hardened Images.

Minimal, hardened Tor middle relay - no exit, no bridge

Traefik 3 on a hardened image with ModSecurity CRS and Coraza WAF.

Hardened Tor hidden service container. Tor + Vanguards, reproducible, PQ + YubiKey signed.

loohive/tor

loohive

LOOHIVE Tor: Hardened Proxy & Onion Sidecar Suite for Anonymity and NAT-less Hosting

Drop-in Rust edge proxy: auth, rate limiting, WAF, hardened headers — zero app changes.

An Alpine hardened based image with netcat.

southrivertech/titandmz

southrivertech

Secure reverse-proxy server pre-configured and, hardened and ready for use with Titan MFT Server

loohive/vault-over-tor

loohive

LOOHIVE Vault-over-Tor: Hardened HashiCorp Vault Secrets via Stealth Onion Services

A minimalist TACACS+ appliance. Provides a simple graphical frontend and hardened implementation.

IRC announce bot + qBittorrent + Flood, hardened and shell-less, non-root, read-only rootfs

AWS Network Forensic Auditor. Detect public exposures and calculate breach risk. Hardened by Design.

Hardened Debian container with networking and recon tools for SSH-based diagnostics and discovery.

Hardened FreeRADIUS 3.0 (EAP-TLS & RadSec) https://github.com/andrey0001/freeradius-tls

A hardened version of https://github.com/jamesgoodhouse/cert-manager-webhook-namecheap/

IRC announce bot + rTorrent + Flood, hardened and shell-less, with the #443 disk-read fix