vps-security-scanner

What problem does it solve?

Performs a full, automated security audit of Linux VPS instances so administrators can detect misconfigurations, exposed services, and known vulnerabilities before they are exploited.

Core Features & Use Cases

• Network and service discovery: nmap-based checks to find exposed ports and service versions.
• SSH hardening audit: verifies sshd_config for risky settings like PermitRootLogin or PasswordAuthentication.
• Container and package vulnerability scanning: integrates trivy and grype outputs to surface CVEs in Docker images and system packages.
• System posture checks: inspects user accounts, SUID files, firewall status, and authentication logs.
• Automation and notifications: designed to run via systemd timer with report parsing and Telegram notifications for daily or on-demand scans.
• Use Case: schedule daily scans to produce a prioritized Markdown report and alert administrators when critical findings appear.

Quick Start

Run the vps-security-scanner to perform a complete VPS audit and save a structured Markdown report to the configured reports directory.