One small script on each server patches it, scans it and blocks attackers. You see every finding and fix it from one dashboard — no terminal needed.
The agent finds which languages and services your server really runs, then asks your package manager for security updates to exactly those — every 2 hours.
Auto-install or alert only. Choose per server: install inside a maintenance window, or just email your team and let them approve.
Safe by default. Versions are saved before every install, PHP-FPM and the web server restart cleanly, and your sites are checked before and after.
Maintenance windows and holds. Pick the hours installs may run, and pin packages you never want touched.
End-of-life warnings. Runtimes and systems that no longer get security fixes are flagged before it is urgent.
Quick checks on every run and a full scan on a schedule or on demand. Here is everything each scanner looks for.
Every web root, file by file.
Checked with a real request from outside.
Compared with what was open last time.
Read from your auth and web server logs.
What is actually running right now.
The ways attackers stay in.
Is the system still what it was installed as?
Benchmark-style checks of the server setup.
Every domain on the server.
So your email keeps arriving.
Checked before and after every patch.
Every finding has a severity. Together they give each server a score out of 100 and a grade from A to F, so you know where to look first.
Every finding has the right fix next to it. The agent picks up your action within 2 minutes and reports back what it did.
Bulk fixes. Filter by severity, select all critical findings and fix them in one click.
Clear status. Each finding is Open, Fixed by action, Resolved or Ignored as a false positive.
Guard rails. It will never close your SSH port, block your own IP or delete a config file.
Write rules in plain words: “if one IP makes 10 failed SSH logins within 10 minutes, block it for 24 hours.” Every server checks its logs against your rules every 2 minutes.
SSH and website logins. Counts failed SSH logins and password attempts on pages like wp-login.php, xmlrpc.php, /login and /admin.
Know who is attacking. Each attacker IP is shown with its country, city and network, and the exact page or account it tried.
Your choice of response. Block for a few hours, permanently, or just send an email. Rules start switched off until you turn them on.
Switch each alert on or off and choose who receives them. Nothing to install on your side.
Your dashboard holds sensitive data about every server, so it is locked down accordingly.
Copy one command from the dashboard. You watch the install and the first scan finish live, step by step.
Overview, Security, Ports, Sites, Actions, Install log and Settings — with the time of the last full scan.
Your servers, rules, alerts and settings are yours alone. Nobody else can see them.
Invite teammates by email. Admins manage everything, operators fix findings, viewers only read.
Use any authenticator app. Failed logins lock out, and the login page is never indexed by search engines.
Passwords, tokens and sensitive finding details are AES-256 encrypted in the database.
Every login, setting change and remote action, with who did it, when and from where.
A full security report per server, ready to send to a client or keep for compliance.
Your office, VPN and monitoring IPs are never blocked — by a rule or by mistake.
One dependency-free bash script. No containers, no inbound ports — the server reports out to your dashboard.
Install takes one command. Your first security report arrives within a few minutes.
Start free audit