Agentless Linux local assessment

Local Linux server evidence without installing an agent.

Scantide Auditor Linux is a lightweight Bash-based local check for Linux servers. It collects service inventory, CVE review, lifecycle review, listening ports, hardening evidence, role detection and platform context into a readable HTML report.

Install and run View example report Windows vs Linux

sudo wget https://www.scantide.com/helpfiles/install-scantide-linux.sh
sudo chmod +x install-scantide-linux.sh
sudo ./install-scantide-linux.sh
sudo scantide-linux --api-key=YOURKEY --email=you@example.com

What this tool is for

Use Scantide Auditor Linux when you want a quick local posture report from a Linux server you are authorized to review. It does not exploit anything. It reads local system evidence and calls Scantide APIs for CVE and lifecycle context when credentials are provided.

What it checks

Linux server posture in one report.

The Linux report is designed to look and feel like the rest of the Scantide family: executive summary first, technical evidence underneath, and raw details in expandable sections.

Service inventory

Detects common Linux services and runtimes such as Apache, Nginx, PHP, OpenSSL, OpenSSH, Redis, Postfix, Squid, HAProxy, dnsmasq, Docker, Podman and VMware Tools.

CVE review

Sends service/runtime versions to the Scantide CVE API. Linux results are presented as review evidence because distributions often backport security fixes.

Lifecycle review

Uses the Linux lifecycle catalog for operating system, kernel and service lifecycle signals instead of treating Linux like ordinary desktop software.

Hardening checks

Reviews practical local posture such as SSH root login, password authentication, firewall state, Redis exposure, Apache/Nginx clues and Docker socket exposure.

Listening ports

Shows local listening TCP/UDP ports, process names and exposure comments so admins can see what the server is actually offering.

Role detection

Infers likely server roles such as web/application server, mail server, proxy/cache, database/cache, DNS/DHCP or VPN using service and port evidence.

Platform context

Detects virtualization or container context such as VMware guest status. Platform context is shown separately and never treated as the server's business role.

Install

Recommended install method

This method is easy to explain and still lets Linux admins inspect the installer before running it.

sudo wget https://www.scantide.com/helpfiles/install-scantide-linux.sh
sudo chmod +x install-scantide-linux.sh
sudo ./install-scantide-linux.sh

Run a report

sudo scantide-linux --api-key YOURKEY --email you@example.com

Uninstall

sudo ./install-scantide-linux.sh --uninstall

Purge reports too

sudo ./install-scantide-linux.sh --purge

Files

Windows PowerShell and Linux are separate Auditor editions.

Edition	Best for	Typical evidence	Run method
Auditor for Windows PowerShell	Windows admins, authorized LAN surveys, local Windows PC checks and CMDB comparison.	Reachable hosts, ports, titles, TLS clues, local Windows endpoint posture, installed software, CVE/lifecycle, ServiceNow-style CMDB checks.	PowerShell script and optional launcher GUI.
Auditor Linux	Linux server admins who want a local server posture report without installing an agent.	Linux service/runtime inventory, CVE/lifecycle context, SSH/firewall/Redis/Docker hardening, listening ports, role detection and expandable evidence.	Bash script installed as `scantide-linux`.
Auditor Android	Field checks, Wi-Fi/local network context and quick mobile visibility.	Nearby network context, local discovery, Wi-Fi evidence and mobile-friendly observations.	Android app/workflow.

Example report

See what the report looks like.

The anonymized example report shows the intended output: summary cards, likely role, lifecycle, CVE review, hardening findings, listening ports and raw evidence in expandable sections.

Open anonymized Linux report