I was about to test HardenedBSD but when I try to access the wiki to read more about their documentation, I see that HardenedBSD is using Nginx HTTP server, exposing the Version of the software they are using. Then I search the web for nginx/1.30.0 exploit and I can see there is one for this version. [ CVE-2026-42945 ] that gives Remote Access.
Based on what Security aims to give (nothing or few), they didn't hide their Nginx Version and therefor anyone can attack that server. I am not sure if this is a good sign, but I guess is not. One of this days I read someone article saying: "HardenedBSD Will substitute OpenBSD", but I doubt it. While OpenBSD claim to be secure, they are really secure to them selfs, by hidding sensitive information about their servers, to be sure they are not easly attacked.
So, I am not sure if I should give them a try, but since they describe to be based on FreeBSD I get curious, and I know that "The Free is faster than the Open", maybe I wouldn't get half of my CPUs locked down with their Security Mitigations. But yeah, I am going to test it anyway, while is true that security practices for the web, is not what HardenedBSD focus in.. Right?