← back

AI-assisted server hardening in one session

Used Claude Code to audit and harden personal servers in a single session: deployed fail2ban, UFW, SSH hardening, automatic security updates, and ran full security scans with rkhunter, chkrootkit, Lynis, ClamAV, and AIDE.

The AI designed the hardening baseline, wrote documentation, set up ongoing monitoring crons, and caught configuration issues I would have missed -- like a service running with unnecessarily elevated privileges.

The most interesting finding: a stuck process that had been burning 100% CPU for a month, silently wasting resources. Routine auditing matters.