Host Check

A read-only security posture report for a single machine.

Inspects firewall state, listening services, SSH posture, accounts, and selected permissions without changing the host.

Start

python src/host_check.py --format text

For a global host-check command, run python -m pip install ..

Run the command with --help for every option. The tool works locally, collects no telemetry, and supports machine-readable output where applicable.

Principles

• Local first. Host data stays on the host unless you explicitly configure a webhook.
• Safe by default. Inspection is read-only and mutation requires a deliberate command.
• Small contract. The tool solves one defensive job and reports its limits plainly.
• Scriptable. Stable exit codes and structured output make automation practical.

Platform

The initial release targets Linux. Portable behavior is also tested on Windows where the underlying operating-system facilities allow it. See the threat model for trust boundaries and non-goals.

Development

This repository uses Python and the standard library only.

python -m compileall -q src
python -m unittest discover -s tests -v

License

MIT © Dispersal Wolves.