Server Tools

Three concrete hardware paths to run Wazuh single-node on under 100 EUR, under 200 EUR or under 10 EUR per month — Raspberry Pi 5, Intel N100 mini-PC, Hetzner CAX21...

32 sysctl toggles grouped by subsystem (network, kernel, filesystem, process / BPF / modules), ordered by impact, with a ready-to-drop /etc/sysctl.d/99-hardening.conf, a one-liner drift check, and per-key gotchas for Docker,...

Add the sites you care about to a watchlist and SecurityWatch runs a 5-point health check on each: uptime, page-content hash (defacement detector), TLS certificate expiry, HTTP security headers regression,...

Free WordPress security scan covering 18 black-box indicators: HTTP security headers, SSL/TLS, version disclosure, xmlrpc.php, readme.html, wp-includes directory listing, user enumeration. Prioritised fix list with severity. Non-intrusive.

Probe any HTTPS URL to find out if it supports HTTP/3 and QUIC. Parses alt-svc, identifies the server software (Cloudflare, Fastly, LiteSpeed, h2o, nginx-quic, Caddy) and explains how to enable...

Detect the CDN serving any URL: Cloudflare, Fastly, Akamai, Amazon CloudFront, Azure Front Door, BunnyCDN, KeyCDN, Vercel, Netlify, jsDelivr and 15 others. Header and DNS fingerprinting in your browser.

Domain Health Check: DNS, WHOIS, SSL, HTTP, Robots and Sitemap AuditRun a complete domain health snapshot from one input: DNS records, WHOIS availability, SSL expiry, HTTP status, robots.txt sitemap discovery...

Generate defensive firewall rule drafts, validate CIDR ranges, review port exposure, copy rollback notes and compare UFW, iptables, nftables, firewalld, Nginx and Cloudflare snippets.

Generate Apache .htaccess and Nginx redirect rules for HTTPS, canonical host cleanup, trailing slashes, index files and URL moves.

Check several SSL certificates in one watchlist, sort by days remaining, choose a renewal threshold, save hosts locally and copy a renewal report.