Documentation
README
VPN Infrastructure Security Audit
Checks that the VPN server is properly hardened. All checks run via ssh_exec.py — no additional tools needed.
When to Use
- User asks about security: "check security", "is my VPN safe"
- After initial deployment (offer proactively)
- User has security concerns
- Periodic security checkup
The Iron Law
EVERY CHECK MUST RUN A COMMAND. NO ASSUMPTIONS.
"quick-rebuild.sh enables the firewall" is not evidence that the firewall is active. Run the check.
Security Checks
Run ALL checks in order. Report each as PASS/FAIL/WARN with evidence.
1. SSH Hardening
1a. SSH Port
Command: python ssh_exec.py exec "grep -E '^Port ' /etc/ssh/sshd_config"
This is the opening of the README. Read the full README on GitHub.