Services audit

The services audit section analyzes each infrastructure service detected on the machine.

Supported services

Service	What is checked
PostgreSQL	Version, authentication rules (pg_hba), TLS, listen addresses
MySQL / MariaDB	Version, skip-grant-tables, bind address, TLS
Nginx	Version, security headers, TLS configuration, status page exposure
Apache	Version, ServerTokens/Signature, TLS, sensitive paths
Docker	Version, rootful mode, TCP API exposure, socket permissions
Postfix	Version, TLS, relay configuration
Redis	Version, bind address, protected mode

Reading a service card

Each service card shows:

• Service name and version (e.g., PostgreSQL 15.3)
• State — running, stopped, or not installed
• Issue count — number of issues by severity (critical / warning)
• Severity badge — overall service health (critical, warning, or healthy)

Issue details

Click a service tab to see its specific issues. Each issue includes:

• Title — what the issue is
• Why it matters — explanation of the security impact
• Fix — copy-paste commands to resolve the issue

Checks performed

When a service has no issues, the card shows what was checked. This confirms the analysis was thorough, not just empty.