Skip to content

kastelldev/kastell

v1.5.0 Feature

This release adds 4 notable features for engineering teams evaluating rollout.

Published 2mo Server & OS Management
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

automation cli coolify devops digitalocean docker
+10 more
dokploy hetzner linode mcp security-audit self-hosted server-management typescript vps vultr

Affected surfaces

auth

Summary

AI summary

Added comprehensive security audit system with history, watch mode, quick wins, auto‑fix, and platform detection

Full changelog

Added

  • Security audit system: kastell audit command with 9 check categories (SSH, auth, firewall, Docker, kernel, filesystem, network, logging, updates), scoring 0-100, terminal/JSON/summary/badge formatters
  • Audit history: kastell audit --history tracks score trends over time with comparison
  • Audit watch mode: kastell audit --watch monitors security score changes on interval
  • Audit quick wins: kastell audit --quick-wins suggests highest-impact fixes
  • Audit auto-fix: kastell audit --fix applies safe remediations automatically
  • MCP server_audit tool: Full audit capabilities exposed via MCP (summary/json/score formats)
  • Token buffer: In-memory token protection with controlled exposure window
  • Platform auto-detection: SSH-based detectPlatform() checks filesystem markers for Dokploy/Coolify/bare

Changed

  • Test count: 2,266 → 2,467 (+201 new tests)
  • Test suites: 86 → 112 (+26 new suites)
  • MCP tools: 7 → 8 (server_audit added)
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track kastelldev/kastell

Get notified when new releases ship.

Sign up free

About kastelldev/kastell

Server security auditing and hardening toolkit. 413 security checks across 29 categories (SSH, Firewall, Docker, TLS, HTTP Headers), CIS/PCI-DSS/HIPAA compliance mapping, 19-step production hardening, fleet management, and forensic evidence collection. Supports Hetzner, DigitalOcean, Vultr, and Linode. 13 MCP tools.

All releases →

Related context

Beta — feedback welcome: [email protected]