Services audit
The services audit section analyzes each infrastructure service detected on the machine.
Supported services
| Service | What is checked |
|---|---|
| PostgreSQL | Version, authentication rules (pg_hba), TLS, listen addresses |
| MySQL / MariaDB | Version, skip-grant-tables, bind address, TLS |
| Nginx | Version, security headers, TLS configuration, status page exposure |
| Apache | Version, ServerTokens/Signature, TLS, sensitive paths |
| Docker | Version, rootful mode, TCP API exposure, socket permissions |
| Postfix | Version, TLS, relay configuration |
| Redis | Version, bind address, protected mode |
Reading a service card
Each service card shows:
- Service name and version (e.g., PostgreSQL 15.3)
- State — running, stopped, or not installed
- Issue count — number of issues by severity (critical / warning)
- Severity badge — overall service health (critical, warning, or healthy)
Issue details
Click a service tab to see its specific issues. Each issue includes:
- Title — what the issue is
- Why it matters — explanation of the security impact
- Fix — copy-paste commands to resolve the issue
Checks performed
When a service has no issues, the card shows what was checked. This confirms the analysis was thorough, not just empty.