diff --git a/sys/amd64/conf/HARDENED b/sys/amd64/conf/HARDENED
new file mode 100644
index 00000000000..8a704edee63
--- /dev/null
+++ b/sys/amd64/conf/HARDENED
@@ -0,0 +1,10 @@
+include GENERIC
+
+options		PAX
+options		PAX_ASLR
+options		PAX_HARDENING
+options		PAX_SYSCTLS
+options		PAX_SEGVGUARD
+options		HBSD_DEBUG
+
+options		EARLY_AP_STARTUP