Monitoring Hardening Coverage Across Our Infrastructure

Hardening is a basic part of infrastructure security. However, hardening defined in documentation often differs from what is actually running in production. Host configurations drift over time, exceptions get lost, and it becomes difficult to understand how much of the infrastructure is truly covered.

In this talk, I will share our experience of monitoring hardening across infrastructure: how the monitoring system was designed, which tools and technologies were used, and how the entire process was fully automated.

The talk will be useful for DevOps, SRE, and Platform engineers, as well as security professionals.