hostcloak.com · defensive only
HostCloak is the calm flight deck for solo operators: a defensive posture grade, a clear fix order, and live host metrics — without pentest theater or exploit kits.
Join waitlist View sample findingsMVP building now. Free scans → Pro monitoring. Not a compliance certificate. Not a pentest.
TLS, headers, loud ports, mail auth, obvious admin exposure — scored with a severity-ranked fix order.
CPU, memory, disk, and bandwidth in/out from a tiny agent you install. No root password stored in our cloud.
Optional enrichment so SSH hammers look like internet background radiation — or something worth a closer look.
| Sev | Finding | Fix order |
|---|---|---|
| High | Admin-style HTTP service reachable on public address | Bind localhost / private net; put behind VPN or reverse proxy auth |
| High | SSH authentication surface broader than key-only baseline | Verify key login, then disable password auth; enable fail2ban |
| Med | TLS certificate expires within 21 days | Renew / fix auto-renew; confirm HTTP→HTTPS redirect |
| Med | Missing strong security headers on primary site | Add HSTS (when ready), CSP baseline, frame protections |
Free — limited external scans. Pro ~$19/mo — Live Deck, history, alerts, PDF. Agency ~$49/mo — more hosts, white-label PDF.