Introduction

Ghostpsy is a security audit tool for Linux servers. It runs a lightweight agent on your machine, collects system and service configuration data, and generates a detailed security report with prioritized risks and remediation steps.

How it works

1. Install the agent on a Linux server (one command, takes 2 minutes)
2. The agent collects system configuration, service versions, network exposure, and security posture
3. The report is generated with an AI-powered analysis of your server's security
4. Review the findings in the dashboard with prioritized risks and copy-paste fixes

What Ghostpsy checks

• OS posture — kernel version, pending security updates, end-of-life status
• Services — PostgreSQL, MySQL, Nginx, Apache, Docker, Postfix, Redis (version, configuration, hardening)
• Network exposure — open ports, firewall rules, WAN probe results
• SSH — password authentication, root login, key configuration
• TLS — certificate expiry, weak ciphers, legacy protocols
• Containers — Docker and Kubernetes workloads, image age, security flags
• Backups — detection of backup tools and last backup timestamps

What Ghostpsy does NOT do

• No vulnerability scanning (CVE matching) — coming soon
• No intrusion detection or runtime monitoring
• No code analysis or application-level testing
• No credential testing or brute-force attempts

The agent runs once per scan, collects read-only data, and sends it to the API. It does not modify your system.