Ross ROSS = Recommend OSS · open-source software intelligence for agents

nsacyber/Windows-Secure-Host-Baseline resource

Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings. #nsacyber observed · 2026-08-28

github.com/nsacyber/Windows-Secure-Host-Baseline · HTML · NOASSERTION (other) · archived observed · 2026-08-28

Health v2 · maintenance only

10/100

  • Activity 0
  • Release rhythm 35
  • Longevity 100

Flags: no_releases archived no_license

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 3841
  • days_rel: n/a
  • days_push: 1348
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

1588 stars · 288 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

NSA's Windows Secure Host Baseline provides configuration guidance and automation for deploying hardened Windows 10 and Windows Server 2016 per DoD security requirements. It includes Group Policy objects, compliance tooling, and settings for applications like Chrome, Adobe Reader, and Microsoft Office.

Use cases

  • harden windows 10 with group policy
  • apply DoD secure host baseline settings
  • audit windows server 2016 compliance
  • configure applocker and windows firewall policies
  • generate nessus audit files for windows compliance

When to choose

  • deploying Windows 10/Server 2016 in DoD or government environments
  • needing authoritative hardening baselines with GPOs and audit content
  • building organizational Windows security configuration from a proven framework

When to avoid

  • hardening Windows 11 or newer Windows Server versions
  • non-Windows operating systems
  • needing actively updated baselines for modern Windows releases

Facets

infra-config · maturity maintenance

configuration-management security security windows legal developer-tools windows group-policy dod hardening windows-10 windows-server-2016 applocker nessus compliance-guidance auditing

1 source

Member repositories

RepositoryRoleHealth v2
nsacyber/Windows-Secure-Host-Baselinemain10

For agents

markdown · JSON · MCP: product_card(name="nsacyber/Windows-Secure-Host-Baseline")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem