Harden application for production security

Harden a production system with security, performance, and operational checks

Harden a production system when systematic audit and controlled rollout are required.

• · system state (logs, config, metrics)
• · baseline (current behavior)
• · hardening spec (optional)

• · hardening plan with priority, risk, owner
• · verified changes applied

• · system access (logs, config)
• · monitoring (metrics)
• · deployment toolchain

• · production access (controlled)
• · change window available
• · baseline metrics recorded

• · change breaks prod (rollback needed)
• · hardening is incomplete (residual risk)
• · owner unavailable (stalled)

• · baseline metrics before/after
• · prioritized by business impact
• · owner accountability