This is a sample of the report format, values are placeholders

Install report: 14 checks

This is the report you get after the install. For each check: what we checked, how, and which artifact is attached so you can re-check it yourself.

Server203.0.113.10, Ubuntu 24.04
AgentHermes Agent, version pinned
Channel@your_agent_bot
Handover dateDD.MM.YYYY

Checks

format sample, placeholder values
#CheckArtifact in the reportResult
01
Only SSH open outsideport scan from an external server
External port scan output
PORT     STATE     SERVICE
22/tcp   open      ssh
(all other ports: filtered)
✓ passed
02
Agent panel listens on localhost onlylistening ports on the server
Listening sockets output
LISTEN 127.0.0.1:<port>  agent-gateway
LISTEN 0.0.0.0:22         sshd
✓ passed
03
SSH by key only, root login disabledeffective sshd configuration
Excerpt from the SSH configuration
passwordauthentication no
permitrootlogin no
✓ passed
04
fail2ban activeSSH brute-force protection status
fail2ban status for SSH
Jail: sshd   Status: active
Currently banned: <N>
✓ passed
05
Security updates install themselvesauto-update settings and log
unattended-upgrades settings and the last run record
✓ passed
06
Agent runs unprivileged and restarts itselfwe stopped the process and checked it came back
Service parameters and restart log
User=agent
Restart=always
✓ passed
07
No keys or tokens in logs or shell historysearch across logs and command history
Search result for key patterns: no matches
✓ passed
08
Skills from allowlist only, marketplace offinstalled skills list
Installed skills list and the setting that turns the marketplace off
✓ passed
09
Model spending cap active and testedOpenRouter key settings
OpenRouter key limit: <amount> per month
✓ passed
10
Memory backup made and test-restoredtest restore into a separate folder
Archive name and date, test restore log
✓ passed
11
Downtime alert reached Telegramtested by stopping the service
Time the service was stopped and time of the alert message in Telegram
✓ passed
12
Our temporary access key removedkeys on the server after handover
Fingerprints of the keys left on the server: yours only
✓ passed
13
Agent version without known CVEs and pinnedauto-updates for the system only
Installed agent version, check against known vulnerabilities on the handover date, agent auto-update disabled
✓ passed
14
Snapshot taken before agent updates, rollback testedtest rollback to the snapshot
Snapshot ID and test rollback log
✓ passed

Report attachments

Full output of the external port scan and the agent's built-in security audit.

A one-page guide.

Request setup What the install includes