OpenSec Atlas

vps-audit: An Open Source Script for Endpoint Security | OpenSec Atlas

Endpoint Security

Script

vps-audit

A lightweight, dependency-free Bash script that audits security, performance, and infrastructure health of Linux VPS servers.

Visit Website View on GitHub

About This Tool

lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.

Primary Use Case

This tool is designed for system administrators and VPS owners who want to quickly assess the security posture and performance metrics of their Linux servers. It automates common security checks and resource monitoring, providing actionable recommendations to improve server hardening and stability. Ideal for routine audits to maintain server integrity and detect potential vulnerabilities.

Key Features

SSH configuration checks including root login, password authentication, and port usage
Firewall (UFW) status verification
Fail2ban configuration audit
Failed login attempt monitoring
System updates status check
Running services and open ports analysis
Sudo logging and password policy enforcement
Performance monitoring of disk, memory, CPU, and active internet connections

Insights & Recommendations

Requires root or sudo privileges and is intended for Debian/Ubuntu-based Linux systems. Users should run audits regularly and address any FAIL statuses immediately while investigating WARN statuses during maintenance. The script is not a substitute for professional security audits and may require customization for specific environments.

Installation

Download the script using wget or curl: wget https://raw.githubusercontent.com/vernu/vps-audit/main/vps-audit.sh or curl -O https://raw.githubusercontent.com/vernu/vps-audit/main/vps-audit.sh
Make the script executable with chmod +x vps-audit.sh

Usage

sudo ./vps-audit.sh

Runs the full security and performance audit with real-time color-coded output and generates a detailed report file.

Smart Usage Notes

Integrate this script into automated CI/CD pipelines for continuous security posture assessment of Linux servers.Extend the script to output JSON or structured logs for easier ingestion by SIEM tools.Schedule regular audits via cron jobs to proactively detect configuration drifts and vulnerabilities.Combine with configuration management tools (e.g., Ansible) to automate remediation based on audit findings.Use the script as a baseline for purple team exercises to validate detection capabilities and hardening effectiveness.