Compliance Scanner

Securing a server on Day 1 is easy. Keeping it secure on Day 300, after multiple developers have logged in and tweaked configurations, is incredibly difficult. Configuration drift is the leading cause of security breaches.

To solve this, RasnuOS includes a native Compliance Scanner that continuously audits your fleet.

Automated Security Auditing

The RasnuOS Agent doesn't just execute deployments; it acts as a continuous security auditor. On a configurable schedule, the Agent inspects the host operating system against strict enterprise security baselines.

The Compliance Scanner automatically detects:

• Exposed Ports: Are databases (Port 3306/5432) accidentally exposed to the public internet?
• Unencrypted Traffic: Is Nginx configured to serve traffic over Port 80 without a mandatory HTTPS redirect?
• Weak SSH Configs: Is PermitRootLogin set to yes? Is password authentication enabled instead of strict public-key authentication?
• Outdated Packages: Are there known CVEs in your installed versions of OpenSSL or Nginx?
• File Permissions: Are sensitive configuration files (like .env) globally readable (chmod 777)?

Real-Time Remediation

When the scanner detects a violation, it doesn't just log an error.

The violation is immediately flagged in the RasnuOS Security Dashboard. For many common violations (like closing an exposed port or enforcing HTTPS), RasnuOS provides a 1-click Auto-Remediate button.

The AI AutoPilot will instantly generate the required Intent, push it to the Agent, and securely resolve the vulnerability in seconds.