Ubuntu Hardening V2

Professional Ubuntu 22.04 LTS security configuration generator for STIG-compliant hardening.

Overview

The Ubuntu Linux Security Hardening Tool is a professional-grade security configuration generator designed for Ubuntu 22.04 LTS systems. It automates the creation of STIG-compliant hardening configurations, eliminating manual security baseline setup and reducing human error in system hardening processes.

This tool enables security engineers, system administrators, and DevOps teams to generate comprehensive hardening configuration files tailored to their specific security requirements. By leveraging industry-standard hardening categories and options, users can quickly deploy security best practices across their infrastructure while maintaining compliance with established security frameworks.

The tool is ideal for organizations implementing Zero Trust architectures, preparing for security audits, managing multi-server deployments, or standardizing security baselines across development, staging, and production environments.

Usage

Example Request

Generate a hardening configuration with kernel hardening, SSH security, and firewall policies enabled:

{
  "hardeningOptions": {
    "kernel_hardening": [
      "kptr_restrict",
      "dmesg_restrict",
      "unprivileged_namespaces"
    ],
    "ssh_security": [
      "disable_password_auth",
      "disable_root_login",
      "change_default_port"
    ],
    "firewall": [
      "enable_ufw",
      "default_deny_incoming"
    ]
  },
  "sessionId": "sess_a1b2c3d4e5f6g7h8",
  "userId": 12345,
  "timestamp": "2024-01-15T10:30:00Z"
}

Example Response

{
  "status": "success",
  "configId": "cfg_9x8y7w6v5u4t3s2r",
  "timestamp": "2024-01-15T10:30:15Z",
  "configurations": {
    "kernel_hardening": {
      "file": "hardening-kernel.conf",
      "settings": [
        {
          "parameter": "kernel.kptr_restrict",
          "value": "2",
          "description": "Hide kernel pointers in dmesg and /proc"
        },
        {
          "parameter": "kernel.dmesg_restrict",
          "value": "1",
          "description": "Restrict dmesg access to root only"
        },
        {
          "parameter": "kernel.unprivileged_userns_clone",
          "value": "0",
          "description": "Disable unprivileged user namespaces"
        }
      ]
    },
    "ssh_security": {
      "file": "hardening-sshd_config",
      "settings": [
        {
          "directive": "PasswordAuthentication",
          "value": "no",
          "description": "Disable password-based authentication"
        },
        {
          "directive": "PermitRootLogin",
          "value": "no",
          "description": "Disable direct root login"
        },
        {
          "directive": "Port",
          "value": "2222",
          "description": "Change SSH listening port from default 22"
        }
      ]
    },
    "firewall": {
      "file": "hardening-ufw.rules",
      "settings": [
        {
          "command": "ufw enable",
          "description": "Enable UFW firewall"
        },
        {
          "command": "ufw default deny incoming",
          "description": "Set default policy to deny all incoming"
        }
      ]
    }
  },
  "totalConfigurations": 3,
  "downloadUrl": "https://api.mkkpro.com/hardening/ubuntu-v2/cfg_9x8y7w6v5u4t3s2r/download"
}

Endpoints

GET /

Description: Health check endpoint to verify API availability.

Parameters: None

Response:

• Status 200: JSON object confirming API health status

---

POST /api/hardening/generate

Description: Generate Ubuntu security hardening configuration files based on specified hardening options.

Parameters:

Name	Type	Required	Description
hardeningOptions	Object	Yes	Map of hardening categories to arrays of specific options to enable. Categories may include: kernel_hardening, ssh_security, firewall, apparmor, audit_logging, user_account_security, file_permissions, network_hardening
sessionId	String	Yes	Unique session identifier for tracking and logging purposes
userId	Integer or null	No	Optional user identifier for audit trail and usage tracking
timestamp	String	Yes	ISO 8601 formatted timestamp when the request is generated

Response:

• Status 200: JSON object containing generated configurations, config ID, and download URL
• Status 422: Validation error with details about invalid request parameters

---

GET /api/hardening/options

Description: Retrieve all available hardening options across all categories that can be used in configuration generation.

Parameters: None

Response:

• Status 200: JSON object containing complete list of all hardening categories and their available options with descriptions

---

GET /api/hardening/categories

Description: Retrieve hardening categories and their associated options for use in building hardening requests.

Parameters: None

Response:

• Status 200: JSON object containing structured hardening categories, available options within each category, and option metadata including descriptions and impact levels

Pricing

Plan	Calls/Day	Calls/Month	Price
Free	5	50	Free
Developer	20	500	$39/mo
Professional	200	5,000	$99/mo
Enterprise	100,000	1,000,000	$299/mo

About

ToolWeb.in - 200+ security APIs, CISSP & CISM, platforms: Pay-per-run, API Gateway, MCP Server, OpenClaw, RapidAPI, YouTube.

• toolweb.in
• portal.toolweb.in
• hub.toolweb.in
• toolweb.in/openclaw/
• rapidapi.com/user/mkrishna477
• youtube.com/@toolweb-009

References

• Kong Route: https://api.mkkpro.com/hardening/ubuntu-v2
• API Docs: https://api.mkkpro.com:8129/docs