SysWarden

SysWarden

Host-local Linux defense

Description

A public Linux server faces constant scans and brute force, with firewall rules scattered across iptables and ufw. SysWarden is a host-local Linux defense tool with auditable, fail-closed enforcement.

It unifies nftables, iptables and ufw rules, integrates intrusion detection and prevention, and supports WireGuard and Wazuh.

Features



Host defense:Local enforcement.

Fail-closed:Secure default.

Auditable:Traceable rules.

Intrusion:HIDS and HIPS.