Skill: krishnakumarmahadevan-cmd/toolweb-windows-hardening (version 1.0.0)

--- name: Windows Security Hardening Tool description: Professional Windows Security Configuration Generator for automated hardening policy creation and deployment. --- # Overview The Windows Security Hardening Tool is a professional-grade API service designed to automate the generation of Windows security hardening configuration files. It enables security teams, system administrators, and compliance professionals to rapidly create standardized, security-focused Windows configurations tailored to specific organizational requirements. This tool leverages industry best practices and security frameworks to generate hardening policies that address common Windows vulnerabilities, enforce security baselines, and support compliance requirements. Key capabilities include dynamic configuration generation based on selected hardening options, retrieval of available hardening parameters, and session-based request tracking for audit purposes. The Windows Security Hardening Tool is ideal for organizations implementing security baselines, preparing systems for production deployment, managing compliance frameworks (CIS, NIST, DoD STIGs), and automating security policy distribution across Windows environments. ## Usage ### Generate Hardening Configuration Create a hardening configuration by specifying desired security options and session details. **Request:** ```json { "sessionId": "sess-2024-001-hardening", "userId": 12345, "timestamp": "2024-01-15T14:30:00Z", "hardeningOptions": { "firewall": [ "enable_inbound_rules", "block_legacy_protocols" ], "services": [ "disable_unnecessary_services", "restrict_remote_access" ], "authentication": [ "enforce_strong_passwords", "enable_mfa" ], "audit": [ "enable_event_logging", "monitor_privileged_access" ] } } ``` **Response:** ```json { "status": "success", "configId": "cfg-2024-001-hw7k2x", "timestamp": "2024-01-15T14:30:05Z", "hardeningProfile": { "firewall": { "inbound_rules": "enabled", "legacy_protocols": "blocked", "status": "configured" }, "services": { "unnecessary_services": "disabled", "remote_access": "restricted", "status": "configured" }, "authentication": { "password_policy": "strong_enforcement", "mfa": "enabled", "status": "configured" }, "audit": { "event_logging": "enabled", "privileged_access_monitoring": "active", "status": "configured" } }, "downloadUrl": "https://api.mkkpro.com/hardening/download/cfg-2024-001-hw7k2x", "expiresIn": 86400 } ``` ## Endpoints ### GET / **Description:** Health check endpoint to verify service availability. **Parameters:** None **Response:** - **200 OK**: Service is healthy and operational. --- ### POST /api/hardening/generate **Description:** Generate Windows security hardening configuration files based on specified hardening options. **Parameters:** | Name | Type | Required | Description | |------|------|----------|-------------| | `sessionId` | string | Yes | Unique session identifier for request tracking and audit purposes. | | `userId` | integer \| null | No | Optional user identifier for multi-tenant environments and access control. | | `timestamp` | string | Yes | ISO 8601 formatted timestamp of the request (e.g., `2024-01-15T14:30:00Z`). | | `hardeningOptions` | object | Yes | Dictionary of hardening categories, each containing an array of specific hardening options to apply. | **Request Body Schema:** ``` hardeningOptions: { [category: string]: string[] } sessionId: string (required) userId: integer | null (optional) timestamp: string (required) ``` **Response:** - **200 OK**: Configuration generated successfully. Returns configuration metadata, applied settings, and download URL. - **422 Unprocessable Entity**: Validation error on request body. Returns validation error details. --- ### GET /api/hardening/options **Description:** Retrieve all available hardening options, categories, and their descriptions for use in configuration generation. **Parameters:** None **Response:** - **200 OK**: Complete list of available hardening categories and options, including descriptions and compatibility information. **Response Structure Example:** ```json { "categories": [ { "name": "firewall", "description": "Windows Firewall and network security settings", "options": [ "enable_inbound_rules", "block_legacy_protocols", "enforce_egress_filtering" ] }, { "name": "services", "description": "System services configuration and management", "options": [ "disable_unnecessary_services", "restrict_remote_access", "harden_critical_services" ] }, { "name": "authentication", "description": "User authentication and access control", "options": [ "enforce_strong_passwords", "enable_mfa", "restrict_local_accounts" ] }, { "name": "audit", "description": "Event logging and audit trail configuration", "options": [ "enable_event_logging", "monitor_privileged_access", "track_configuration_changes" ] } ] } ``` ## Pricing | Plan | Calls/Day | Calls/Month | Price | |------|-----------|-------------|-------| | Free | 5 | 50 | Free | | Developer | 20 | 500 | $39/mo | | Professional | 200 | 5,000 | $99/mo | | Enterprise | 100,000 | 1,000,000 | $299/mo | ## About ToolWeb.in - 200+ security APIs, CISSP & CISM, platforms: Pay-per-run, API Gateway, MCP Server, OpenClaw, RapidAPI, YouTube. - [toolweb.in](https://toolweb.in) - [portal.toolweb.in](https://portal.toolweb.in) - [hub.toolweb.in](https://hub.toolweb.in) - [toolweb.in/openclaw/](https://toolweb.in/openclaw/) - [rapidapi.com/user/mkrishna477](https://rapidapi.com/user/mkrishna477) - [youtube.com/@toolweb-009](https://youtube.com/@toolweb-009) ## References - **Kong Route:** https://api.mkkpro.com/hardening/windows - **API Docs:** https://api.mkkpro.com:8125/docs


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)