Automated server hardening scripts implementing CIS benchmarks: firewall, SSH, audit logging, user management.