Hardened OS images
Ubuntu LTS, Debian, Rocky Linux and AlmaLinux with a CIS-aligned baseline applied at first boot: key-only SSH, host firewall, fail2ban, unattended security updates. Windows Server with restricted RDP and scheduled updates.
42-check report per Linux server