Security Audit and Hardening

OpenELIS is a critical open-source laboratory information system used globally by healthcare facilities, particularly in low-resource settings, to manage patient data, test results, and laboratory operations. As healthcare systems increasingly face cyber threats, ensuring the security and integrity of OpenELIS is paramount to protecting sensitive patient data and maintaining trust in healthcare delivery. This project aims to conduct a comprehensive security audit of OpenELIS to identify vulnerabilities, risks, and potential attack surfaces across its architecture and dependencies. The work will include threat modeling, vulnerability scanning, and risk prioritization, followed by recommendations and targeted fixes where feasible. The project will establish a strong security baseline for OpenELIS, improving trust, supporting compliance with healthcare data protection standards, and ensuring long-term maintainability for the open-source community.