Linux Server Audit Toolkit

Audit a Linux server in minutes. Get an actionable security & health report.

Managing Linux servers, VPS instances, cloud VMs, or client infrastructure?

The NitaLabs Linux Server Audit Toolkit performs a practical audit of system health, security posture, services, Docker workloads, and network exposure — then generates a standalone HTML report with findings, coverage information, and actionable remediation guidance.

No third-party Python packages are required.

🔍 What It Audits

Security Posture

• SSH root login configuration
• SSH password authentication
• Host firewall status
• Unexpected UID 0 accounts
• Empty password detection
• Pending package / security updates
• Sensitive services exposed on public interfaces

System Health

• CPU load
• Memory and swap usage
• Root filesystem utilization
• System uptime and host information

Services & Containers

• Failed systemd units
• Docker Engine availability
• Running containers
• Container restart-loop detection

Network Exposure

• Active listening ports
• Public vs local bindings
• Detection of potentially exposed database services including PostgreSQL, MySQL, Redis and MongoDB

📊 Standalone HTML Security Report

The primary Python engine generates a responsive, fully offline HTML report containing:

• Security Score and grade
• Evaluated vs skipped check coverage
• PASS / WARN / FAIL / INFO / SKIP statuses
• Host and operating system information
• Security findings
• Network exposure overview
• Remediation guidance
• Copy-friendly command examples
• Dark dashboard-style interface

No CDN, external JavaScript framework, or internet connection is required to view the generated report.

⚡ No Third-Party Python Dependencies

The main audit engine is built using the Python 3 standard library and standard Linux system utilities.

No pip install, virtual environment, or Python package compilation is required.

sudo python3 nitalabs-audit.py

A reduced Bash fallback is also included for environments where Python 3 is unavailable:

sudo bash nitalabs-audit.sh

The Bash version provides terminal-based diagnostics and does not replace the full Python HTML reporting engine.

🛡️ Graceful Degradation

Linux environments vary considerably.

If an audit capability cannot be evaluated because a utility, daemon, Docker Engine, systemd, or required privilege is unavailable, the toolkit reports the check as:

SKIP / NOT AVAILABLE

instead of treating it as a security failure.

Skipped checks do not reduce the Security Score.

Example:

SECURITY SCORE: 85 / 100 of evaluated checks

Coverage: 11 evaluated · 3 skipped

🐧 Platform Compatibility

✅ Tested

• Ubuntu 24.04 LTS
• Debian 12 Bookworm
• AlmaLinux 9

🟡 Expected Compatible

• Ubuntu 22.04 LTS
• Debian 13
• RHEL 9 / 10
• AlmaLinux 10
• Rocky Linux 9 / 10

⚠️ Limited

• Minimal containers
• Unprivileged environments
• Alpine Linux

Unsupported or unavailable system capabilities are handled through graceful degradation whenever possible.

📦 What's Included

linux-server-audit-toolkit/

├── nitalabs-audit.py

├── nitalabs-audit.sh

│

├── docs/

│ ├── QUICKSTART.md

│ ├── INTERPRETING_RESULTS.md

│ ├── HARDENING_GUIDE.md

│ └── SUPPORTED_SYSTEMS.md

│

├── sample-report/

│ └── sample-audit-report.html

│

├── LICENSE.txt

└── README.md

Included Documentation

QUICKSTART.md

Get your first audit running in minutes.

INTERPRETING_RESULTS.md

Understand the Security Score, findings and coverage model.

HARDENING_GUIDE.md

Practical remediation guidance for common Linux security findings.

SUPPORTED_SYSTEMS.md

Detailed operating system compatibility information.

Sample HTML Report

Inspect the report format before running your first audit.

👨‍💻 Who Is It For?

Ideal for:

• Linux System Administrators
• DevOps Engineers
• SREs
• DevSecOps Engineers
• Cloud Engineers
• Freelance SysAdmins
• VPS administrators
• Homelab users
• Technical consultants
• Students practicing Linux hardening

⚠️ Security Score Notice

The Security Score is a practical heuristic based on the checks performed by the toolkit.

It is not a compliance certification, penetration test, vulnerability assessment certification, or substitute for a professional security assessment.

📄 License

Commercial use is permitted in your own projects and client infrastructure according to the included license.

Redistribution, resale, sublicensing, republishing, or repackaging the toolkit itself as a competing downloadable product is prohibited.

You will get a ZIP (653KB) file