Any tool to check the security of my server?

This page summarizes the projects mentioned and recommended in the original post on /r/selfhosted

Our great sponsors
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • WorkOS - The modern identity platform for B2B SaaS
  • SaaSHub - Software Alternatives and Reviews
  • http-observatory

    Mozilla HTTP Observatory

  • Mozilla Observatory

  • lynis

    Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

  • Maybe try lynis

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • debian-cis

    PCI-DSS compliant Debian 10/11/12 hardening

  • I normally use debian-cis: https://github.com/ovh/debian-cis

  • hardening

    Hardening Ubuntu. Systemd edition.

  • There is also: https://github.com/konstruktoid/hardening

  • bastion

    🔒Secure Bastion implemented as Docker Container running Alpine Linux with Google Authenticator & DUO MFA support (by cloudposse)

  • cloudposse/bastion

  • pam-u2f

    Pluggable Authentication Module (PAM) for U2F and FIDO2

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts