Stenvakt

Stenvakt is a Mac app for the Linux servers you run yourself. It logs in over SSH with the keys you already use and installs nothing on the server. It reviews each server, sorts what it finds into fix now, worth doing and nice to have, and explains each item in plain words. For example, it catches Docker ports that quietly bypass your ufw firewall.

Every fix shows its exact script before it runs. With safe mode on, firewall and SSH changes are kept only after a brand-new login works. If a change would lock you out, the server undoes it by itself, even if your Mac goes to sleep.

Review, fixes, safe mode and rollback are free. Pro adds monitoring, automatic fixes, a weekly digest and login guard. Tested on Ubuntu and Debian.