zw008/VMware-Harden

What it does

zw008/VMwareHarden is an MCP server that automates VMware vSphere security compliance and hardening operations. It provides readonly baseline scanning and drift detection capabilities across multiple compliance frameworks including CIS, vSphere Security Configuration Guide (SCG), China DJCP 2.0, and PCIDSS standards. The tool leverages LLM capabilities to generate intelligent remediation suggestions while maintaining security through VMware Pilot approval workflows.

How to set up

This tool is deployed as an MCP (Model Context Protocol) server compatible with Claude, ChatGPT, and AI Studio platforms. Installation involves configuring the server endpoint and authentication credentials for your VMware vSphere environment. Detailed setup instructions are available in the GitHub repository at zw008/VMwareHarden.

Key features

• Readonly baseline scanning across CIS, vSphere SCG, China DJCP 2.0, and PCIDSS frameworks
• Drift detection to identify configuration deviations from security baselines
• 6 readonly tools for comprehensive compliance assessment
• LLM-powered remediation suggestions with intelligent recommendations
• VMware Pilot approval workflow integration for secure remediation execution
• Multi-framework compliance support for diverse regulatory requirements