Security Hardening

This is a comprehensive infrastructure hardening guide that walks you through reducing attack surface across OS, container, cloud, network, and database layers. It's built around CIS Benchmarks and zero-trust principles, giving you concrete commands for tools like Trivy, kube-bench, and docker-bench-security. The layered approach makes sense: start with internet-facing systems, then sensitive data stores, then internal infrastructure. What stands out is the practical hardening priority framework and the specific base image recommendations (Chainguard for production, Alpine for dev). Use this when preparing for security audits, meeting compliance requirements like SOC 2 or PCI-DSS, or setting up automated security baselines in your CI/CD pipeline.

skills.sh installs: 180
GitHub stars: 530
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add ancoleman/ai-design-components --skill security-hardening --agent claude-code

Installs into .claude/skills of the current project.

Files

Security Hardening

Purpose

Proactive reduction of attack surface across infrastructure layers through systematic configuration hardening, least-privilege enforcement, and automated security controls. Applies industry-standard CIS Benchmarks and zero-trust principles to operating systems, containers, cloud configurations, networks, and databases.