Skip to main content

Vulnerability management

Cloud and dedicated servers

We recommend scanning servers for vulnerabilities. This can be done using network vulnerability scanners or software agents on hosts.

Network scanners check hosts that are accessible over the network, and some scanners also support authentication configuration for more accurate analysis.

To analyze vulnerabilities of public IP addresses that belong to your infrastructure in Selectel, you can use the Vulnerability Scanner service. The service allows you to scan external IP addresses using an FSTEC-certified security analysis tool.

You can use free network scanners:

An example of a free scanner that operates as an agent on hosts is Wazuh. For the scanner to work on each host, install:

  • a shared Wazuh server — see the Quickstart article in the Wazuh documentation for details;
  • Wazuh agents — see the Wazuh agent article in the Wazuh documentation for details.

You can create a cloud server with a pre-installed Wazuh application.

On Linux servers, you can also use Lynis, a security auditing and compliance testing tool at the host level. Lynis ensures the security of the operating system and applications by checking configurations, access permissions, vulnerabilities, outdated packages, firewall settings, and critical system parameters.

You can install scanners on cloud servers as custom images.