Worked on the MHSanaei/3x-ui repository to deliver X-UI Service Security Hardening, focusing on reducing the attack surface and improving runtime security. The approach involved configuring systemd unit files to restrict the X-UI service’s access to sensitive resources such as home directories, kernel modules, control groups, kernel logs, hostnames, and clock settings. Leveraging skills in Linux system administration and system hardening, the work enforced non-executable memory (W^X) for the X-UI process, mitigating memory-based attacks. This feature aligned with security governance requirements and created a more isolated environment for the service, enhancing overall security posture without introducing new bugs.