# About ServerAuditing

> ServerAuditing.com is a free resource from the Forward Email team. It hosts server_audit_notify.sh and plain guides on auditing Linux servers.

Source: https://serverauditing.com/about/

## Who runs this site?

The [Forward Email](https://forwardemail.net) team runs this site and maintains the script. Forward Email is an open-source email service. Its source code is on [GitHub](https://github.com/forwardemail/forwardemail.net), and it supports IMAP, POP3, SMTP, CalDAV and CardDAV. The free plan forwards mail for your domain after you add MX and TXT DNS records, with no account needed, and the service can be self-hosted with Docker.

The script uses `smtp.forwardemail.net` as its default SMTP server. You can point it at any SMTP server that supports implicit TLS or STARTTLS.

## What this site covers

Each page answers one question about auditing a Linux server with the script.

| Page | What it answers |
| --- | --- |
| [Server audit script](https://serverauditing.com/) | What `server_audit_notify.sh` is, what it checks, and a quick start |
| [Install guide](https://serverauditing.com/install/) | How to install it, run a test, and schedule it with cron or a systemd timer |
| [What the script checks](https://serverauditing.com/what-it-checks/) | The command behind each check, the files it writes, and the email layout |
| [Linux server audit checklist](https://serverauditing.com/linux-server-audit-checklist/) | What else to audit by hand, with commands and links to CIS, NIST and vendor documentation |
| [Compliance context](https://serverauditing.com/compliance/) | How the reports relate to HIPAA, PCI DSS, NIST, SOC 2 and ISO/IEC 27001 |
| [FAQ](https://serverauditing.com/faq/) | Short answers about cost, supported systems, email delivery and password handling |

The pages describe the script as it is in the repository. If you find a page that no longer matches the code, open an issue.

## Source and license

- The site and script live in the [forwardemail/serverauditing.com](https://github.com/forwardemail/serverauditing.com) repository. GitHub Pages publishes the `main` branch.
- The header of `server_audit_notify.sh` declares the MIT license.
- Every page has a Markdown copy at `index.md` in the same folder, and `/llms.txt` lists them all for AI tools.

## How to contact the team

- Bugs and questions: [GitHub issues](https://github.com/forwardemail/serverauditing.com/issues).
- Security reports: email [security@forwardemail.net](mailto:security@forwardemail.net), the contact in `/.well-known/security.txt`, as the [Forward Email security policy](https://forwardemail.net/en/security) describes.
- Forward Email support: [forwardemail.net/en/faq](https://forwardemail.net/en/faq).

## Privacy note

This site sets no cookies and runs no JavaScript. It loads no analytics, tracking pixels, web fonts or other third-party resources; every file comes from serverauditing.com, so your browser only talks to this domain.

Requests to serverauditing.com pass through Cloudflare, which runs as a CDN and proxy in front of GitHub Pages and processes the IP address of each visitor ([Cloudflare privacy policy](https://www.cloudflare.com/privacypolicy/)). GitHub Pages hosts the files. GitHub says in its [Pages documentation](https://docs.github.com/en/pages/getting-started-with-github-pages/about-github-pages) that it logs and stores the IP address of each visitor for security purposes. The [GitHub Privacy Statement](https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement) covers that data.

The script sends its reports only to the email address you set, through the SMTP server you set (`smtp.forwardemail.net` unless you change it). Apart from package downloads when it installs Lynis or `curl`, the script itself sends nothing else.

## Related sites from the Forward Email team

- [Attestium](https://attestium.com): a Node.js library for remote attestation that checks evidence of what a machine runs against references the verifier fetches itself.
- [Audit Status](https://auditstatus.com): a tool built on Attestium that checks production servers run the code in a public repository.
- [SSHMonitor.com](https://sshmonitor.com), [SSLMonitor.com](https://sslmonitor.com), [TimeToInbox.com](https://timetoinbox.com) and [AlumniEmail.com](https://alumniemail.com).