Introduction
Ghostpsy is a security audit tool for Linux servers. It runs a lightweight agent on your machine, collects system and service configuration data, and generates a detailed security report with prioritized risks and remediation steps.
How it works
- Install the agent on a Linux server (one command, takes 2 minutes)
- The agent collects system configuration, service versions, network exposure, and security posture
- The report is generated with an AI-powered analysis of your server's security
- Review the findings in the dashboard with prioritized risks and copy-paste fixes
What Ghostpsy checks
- OS posture — kernel version, pending security updates, end-of-life status
- Services — PostgreSQL, MySQL, Nginx, Apache, Docker, Postfix, Redis (version, configuration, hardening)
- Network exposure — open ports, firewall rules, WAN probe results
- SSH — password authentication, root login, key configuration
- TLS — certificate expiry, weak ciphers, legacy protocols
- Containers — Docker and Kubernetes workloads, image age, security flags
- Backups — detection of backup tools and last backup timestamps
What Ghostpsy does NOT do
- No vulnerability scanning (CVE matching) — coming soon
- No intrusion detection or runtime monitoring
- No code analysis or application-level testing
- No credential testing or brute-force attempts
The agent runs once per scan, collects read-only data, and sends it to the API. It does not modify your system.