securityagent_
┌─ intrusion detection // system health ──

Know the moment a server is
brute-forced — or running hot.

A 100 MB-capped shell agent watches /var/log/auth.log in real time and streams CPU, memory, disk and bandwidth to one SOC console. Deploy in one command.

start free ▸ view plans 
# one line, any Debian/Ubuntu host
$ curl -s https://get.securityagent.io | sudo sh
[ok] agent installed, systemd unit enabled
[ok] watching auth.log · heartbeat 60s · cap 10% cpu / 100M
what it does
▚
SSH brute-force detection

N failed logins from one IP inside a rolling window trips an alert — with per-IP cooldown so the feed stays clean.

▚
Compromise flagging

An IP that brute-forces then authenticates is escalated to CRITICAL automatically.

▚
Host health

CPU, memory, disk-per-mount and network bandwidth on a 60s heartbeat. Thresholds are yours to set.

▚
Never drops an alert

Alerts queue on a background thread, retry with backoff, and buffer to disk if the network is down.

▚
Bounded footprint

systemd CPUQuota 10% / MemoryMax 100M. Per-IP tracking auto-expires — memory can not grow under attack.

▚
One YAML file

Agent id, API key, every threshold, heartbeat interval. No redeploys to retune.

pricing // per account, cancel anytime
Starter
Free

For a single small fleet.

  • › up to 3 servers
  • › 3 servers
  • › Email alerts
  • › 7-day metric history
choose Starter
Pro
$49 / monthly

Growing teams that need more coverage.

  • › up to 25 servers
  • › 25 servers
  • › Slack + webhook alerts
  • › 30-day history
  • › Priority support
choose Pro
Business
$199 / monthly

Full SOC coverage across the estate.

  • › up to 200 servers
  • › 200 servers
  • › All alert channels
  • › 1-year history
  • › SSO
  • › SLA
choose Business

Put a sensor on every box tonight.

Free tier covers 3 servers. No card required.

create account ▸