Why do you expose port 22 to the entire internet? Limit it to your own IP addresses and/or only allow access through your Wireguard/VPN ranges. Then changing the default port becomes meaningless.

wazuh

Oh hey, thanks for that. I have eyed Sandfly before for filesystem drift detection among other things, but I don’t think they have a free tier (anymore?). I also ran into Lynis, which performs health and compliance scans of your systems. Lots of good information and general hardening advice from that.

Not even looking at the code, but only seeing it kinda works at a functional level, usually only superficially.

Holy shit! That’s a first for me. I’m not as anti as I once was, but vibe coding is just irresponsible. Do they have the same definition of it as I have?