This is a sample of the report format, values are placeholders
Install report: 14 checks
This is the report you get after the install. For each check: what we checked, how, and which artifact is attached so you can re-check it yourself.
Checks
format sample, placeholder values#CheckArtifact in the reportResult
01
Only SSH open outsideport scan from an external server
External port scan output
✓ passedPORT STATE SERVICE 22/tcp open ssh (all other ports: filtered)
02
Agent panel listens on localhost onlylistening ports on the server
Listening sockets output
✓ passedLISTEN 127.0.0.1:<port> agent-gateway LISTEN 0.0.0.0:22 sshd
03
SSH by key only, root login disabledeffective sshd configuration
Excerpt from the SSH configuration
✓ passedpasswordauthentication no permitrootlogin no
04
fail2ban activeSSH brute-force protection status
fail2ban status for SSH
✓ passedJail: sshd Status: active Currently banned: <N>
05
Security updates install themselvesauto-update settings and log
unattended-upgrades settings and the last run record
✓ passed06
Agent runs unprivileged and restarts itselfwe stopped the process and checked it came back
Service parameters and restart log
✓ passedUser=agent Restart=always
07
No keys or tokens in logs or shell historysearch across logs and command history
Search result for key patterns: no matches
✓ passed08
Skills from allowlist only, marketplace offinstalled skills list
Installed skills list and the setting that turns the marketplace off
✓ passed09
Model spending cap active and testedOpenRouter key settings
OpenRouter key limit: <amount> per month
✓ passed10
Memory backup made and test-restoredtest restore into a separate folder
Archive name and date, test restore log
✓ passed11
Downtime alert reached Telegramtested by stopping the service
Time the service was stopped and time of the alert message in Telegram
✓ passed12
Our temporary access key removedkeys on the server after handover
Fingerprints of the keys left on the server: yours only
✓ passed13
Agent version without known CVEs and pinnedauto-updates for the system only
Installed agent version, check against known vulnerabilities on the handover date, agent auto-update disabled
✓ passed14
Snapshot taken before agent updates, rollback testedtest rollback to the snapshot
Snapshot ID and test rollback log
✓ passedReport attachments
Full output of the external port scan and the agent's built-in security audit.
A one-page guide.