About ServerAuditing
ServerAuditing.com is a free resource from the Forward Email team. It hosts server_audit_notify.sh and plain guides on auditing Linux servers.
Who runs this site?
The Forward Email team runs this site and maintains the script. Forward Email is an open-source email service. Its source code is on GitHub, and it supports IMAP, POP3, SMTP, CalDAV and CardDAV. The free plan forwards mail for your domain after you add MX and TXT DNS records, with no account needed, and the service can be self-hosted with Docker.
The script uses smtp.forwardemail.net as its default SMTP server. You can point it at any SMTP server that supports implicit TLS or STARTTLS.
What this site covers
Each page answers one question about auditing a Linux server with the script.
| Page | What it answers |
|---|---|
| Server audit script | What server_audit_notify.sh is, what it checks, and a quick start |
| Install guide | How to install it, run a test, and schedule it with cron or a systemd timer |
| What the script checks | The command behind each check, the files it writes, and the email layout |
| Linux server audit checklist | What else to audit by hand, with commands and links to CIS, NIST and vendor documentation |
| Compliance context | How the reports relate to HIPAA, PCI DSS, NIST, SOC 2 and ISO/IEC 27001 |
| FAQ | Short answers about cost, supported systems, email delivery and password handling |
The pages describe the script as it is in the repository. If you find a page that no longer matches the code, open an issue.
Source and license
- The site and script live in the forwardemail/serverauditing.com repository. GitHub Pages publishes the
mainbranch. - The header of
server_audit_notify.shdeclares the MIT license. - Every page has a Markdown copy at
index.mdin the same folder, and/llms.txtlists them all for AI tools.
How to contact the team
- Bugs and questions: GitHub issues.
- Security reports: email security@forwardemail.net, the contact in
/.well-known/security.txt, as the Forward Email security policy describes. - Forward Email support: forwardemail.net/en/faq.
Privacy note
This site sets no cookies and runs no JavaScript. It loads no analytics, tracking pixels, web fonts or other third-party resources; every file comes from serverauditing.com, so your browser only talks to this domain.
Requests to serverauditing.com pass through Cloudflare, which runs as a CDN and proxy in front of GitHub Pages and processes the IP address of each visitor (Cloudflare privacy policy). GitHub Pages hosts the files. GitHub says in its Pages documentation that it logs and stores the IP address of each visitor for security purposes. The GitHub Privacy Statement covers that data.
The script sends its reports only to the email address you set, through the SMTP server you set (smtp.forwardemail.net unless you change it). Apart from package downloads when it installs Lynis or curl, the script itself sends nothing else.
Related sites from the Forward Email team
- Attestium: a Node.js library for remote attestation that checks evidence of what a machine runs against references the verifier fetches itself.
- Audit Status: a tool built on Attestium that checks production servers run the code in a public repository.
- SSHMonitor.com, SSLMonitor.com, TimeToInbox.com and AlumniEmail.com.