Features How it works Pricing Docs Sign in Start free audit
Server security for Linux

Audit, patch & protect every server you run

One small agent finds malware, exposed backups, open ports and missing security patches — and blocks brute-force attackers. You see it all, and fix it, from one dashboard.

Start free audit See the dashboard
11security scanners
2 hpatch & scan cycle
2 minto act on a finding
AuditBash dashboard: every server with its security grade, runtimes and pending patches 4 servers reporting
Every 2 hsecurity patches checked, then installed or sent to your team
Brute-force rule hits with attacker country, city and what they attacked ⛔ IP blocked by a rule
Runs on
UbuntuDebianRHELRockyAlmaLinuxAmazon LinuxFedoraAlpine
UbuntuDebianRHELRocky LinuxAlmaLinuxAmazon LinuxFedoraAlpinePleskcPanel
Security findings with one-click and bulk fixes
Listening ports with block and unblock buttons
1 lineto install the agent
Why AuditBash

One agent. One dashboard. Every server covered.

Most servers get hacked through something boring: an old PHP version, a forgotten backup.zip, a database port left open, or a password guessed after thousands of tries. AuditBash watches for all of it, all the time.

Patches without the busywork. It finds every language your server runs and installs their security updates every 2 hours — or alerts your team first.

Fix from the browser. Quarantine a webshell, delete a backup, block a port or an IP — one finding at a time or all critical ones at once.

Know who is attacking. See each attacker's country and city, and the exact login page or SSH account they tried.

Explore all features
What it checks

Every layer an attacker looks at first

Quick checks run every 2 hours. A deep scan of every website on the server runs daily, or whenever you click “Scan now”.

Automatic security patches

PHP, Python, Node.js, Ruby, Java, Go and more — security updates installed on schedule, with your sites checked before and after.

aptdnfyumapk
Learn more →

Malware & webshells

Every web root scanned for webshells, spam mailers, obfuscated PHP and crypto-miners. Quarantine or delete in one click.

WordPressLaravelClamAV
Learn more →

Exposed backups & dumps

.zip, .sql, .csv and .env files anyone can download — tested over HTTP exactly the way an attacker would.

backup.zip.env.git
Learn more →

Open ports & firewall

Every listening service listed, public databases flagged, and any port or IP blocked from the dashboard.

iptablesufwfirewalld
Learn more →

Brute-force blocking

Rules like “10 failed SSH logins in 10 minutes → block for 24 hours”. Checked every 2 minutes, with the attacker's location.

SSHwp-loginxmlrpc
Learn more →

A dashboard that is locked down

Admin, operator and viewer roles, two-factor login, encrypted data at rest and a full audit log of every action.

2FAAES-256Audit log
Learn more →
How it works

From install to protected in minutes

No inbound ports, no agents to babysit. The server reports out to your dashboard and picks up your fixes.

01

Install

Paste one command on the server. Watch each install step appear live in the dashboard.

curl … | sudo bash
02

Scan

Within minutes you get a security grade and every finding, ranked from critical to low.

auditbash scan
03

Fix

Pick findings — or select all critical — and choose quarantine, delete, block or patch.

Fix selected
04

Stay patched

Every 2 hours it re-checks, patches, and emails you the moment something new turns up.

every 2 h
Inside the dashboard

See it. Select it. Fix it.

How it works
Findings with group selection and bulk fixes
Findings

Fix one — or all critical at once

Select by severity, files or attacker IPs, then quarantine, delete or block in bulk.
Brute-force rule hits with location and target
Brute-force rules

Know who attacked, from where

Country, city and network of every blocked IP, plus the page or account they targeted.
Listening ports with block buttons
Ports & firewall

Close what should not be open

Public databases and stray services flagged — blocked with one click, never your SSH port.
Pricing

Simple plans, serious protection

Every plan includes the full agent. You only choose where the dashboard lives.

Cloud Dashboard

14 days free

$19 / month

Hosted by us. Install only the agent on your servers and start in minutes.

  • Fleet dashboard & security grades
  • Security patches every 2 hours
  • Malware, backup, port & attack scans
  • Brute-force rules with IP location
  • One-click and bulk fixes
  • Email alerts & printable reports
Start 14-day free trial

Private Dedicated

On your server

$99 / month

A dedicated dashboard installed on a server you own. Nothing is shared.

  • Everything in Cloud Dashboard
  • Dashboard installed on your server by us
  • Scan data never leaves your network
  • Your own domain, SMTP and 2FA policy
  • Updates & maintenance included
  • Priority support
Request dedicated setup

Prices in USD, billed monthly. Cancel any time. Compare plans →

FAQ

Questions, answered

Will it change my server without asking?

Only if you tell it to. Each server is either “auto-apply security patches” or “alert only”. Fixes like blocking an IP or deleting a file run only when someone with the right role clicks them — or when a brute-force rule you switched on fires.

Does the agent open any ports?

No. It connects out to the dashboard over HTTPS to send reports and pick up actions. Nothing new listens on your server.

Can it lock me out of my own server?

No. It refuses to block the SSH port, the server's own IPs, private networks, anyone currently logged in over SSH, and any IP on your never-block list.

Which servers are supported?

Ubuntu, Debian, RHEL, Rocky, AlmaLinux, Amazon Linux 2 and 2023, Fedora, Alpine and CentOS 7 — including servers run with Plesk or cPanel.

Know what's exposed before someone else does

Your first audit takes one command and a few minutes. 14 days free on the Cloud Dashboard.

Start free audit See pricing