Security Hardening

This is a comprehensive infrastructure hardening guide that walks you through reducing attack surface across OS, container, cloud, network, and database layers. It's built around CIS Benchmarks and zero-trust principles, giving you concrete commands for tools like Trivy, kube-bench, and docker-bench-security. The layered approach makes sense: start with internet-facing systems, then sensitive data stores, then internal infrastructure. What stands out is the practical hardening priority framework and the specific base image recommendations (Chainguard for production, Alpine for dev). Use this when preparing for security audits, meeting compliance requirements like SOC 2 or PCI-DSS, or setting up automated security baselines in your CI/CD pipeline.

Install to Claude Code

npx -y skills add ancoleman/ai-design-components --skill security-hardening --agent claude-code