[egberts1]

There’s Dev-Sec which is more about multi-OS-platform as well as multi-IaS (Ansible, Puppet, Chef).

Covers SSH, NGINX, Apache, Windows hardening, MySQL, and Linux hardening.

Free, to boot.

https://github.com/dev-sec/ansible-collection-hardening