System security

From wikinotes

General

keepass password database
kpcli cli access to keepass db
keeweb web access to keepass db
pass simple/cli gpg keys to manage passwords
okta Proprietary identity server (SSO, MFA, ...)

Unix

Program Description
denyhosts protect ssh ports against brute force attacks
fail2ban watch logs for various programs and protects against brute force attacks
sshguard protects against brute force ssh attacks
apparmor restricts an application's permissions