# Server Hardening Review

> Review a local Linux host or authorized server exposure for patch state, listening services, SSH, firewall, permissions, containers, and web roots. Use it when deployment or host hardening is part of the security scope.

- Skill: `0xcryptj/server-hardening-review` (Agent Skill)
- Install (CLI): `npx skillmds@latest add 0xcryptj/server-hardening-review`
- Raw SKILL.md: https://api.skillmd.com/api/skills/0xcryptj/server-hardening-review/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- License: MIT
- Author: 0xcryptj (https://skillmd.com/u/0xcryptj)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/0xcryptj/server-hardening-review

---


# Server Hardening Review

## When to Use

Use this capability for a local Linux machine or an authorized externally reachable server where service exposure and host hardening may affect application risk.

## Prerequisites

- Local access, or explicit authorization for remote enumeration.
- Knowledge of required application services and maintenance windows.
- Permission to inspect host configuration without changing it.

## Workflow

1. Run `./agentsec server --local` for local evidence.
2. For an authorized remote target, use `./agentsec server --target host.example --authorized`.
3. Compare listeners, SSH, firewall, Docker, web roots, and database exposure with the intended architecture.
4. Fix unnecessary exposure at the service or network boundary and preserve required workload behavior.

## Verification

Repeat the relevant audit and confirm required services remain available, unnecessary ports are closed, and the report distinguishes externally observed evidence from controls that require host/provider access.