Claude CodeSecurityVulnerability huntingAI score · 66/100AI-assisted edit · no obvious prompt-injection riskX

Run Security Audits on Every VPS and Site with Claude Code

VPS and site directories → Claude Code security audit → findings and hardening suggestions

Some experienceStepsPrompt
Who
Developers or ops people with multiple VPSes and sites who need regular security audits
You get
Run AI-driven security audits across all infrastructure as a regular monthly 'security week' practice
You need
Claude Code

Constraints

Source describes only a single prompt entered into Claude Code, with no additional configuration details. Author had pre-existing environment: Ubuntu unattended-upgrades with auto-reboot, Tailscale network isolation (policies generated by Claude Code), www-data user permission isolation. These are the author's existing setup, not required prerequisites for this audit workflow.

What they did

levelsio spent a full day entering the same prompt into Claude Code for every VPS and site he owns: 'Do a full security audit of this website and server'.

How it went

Author reports having performed this (author_report), without describing specific output. Author mentions pre-existing measures: automatic security updates, Tailscale isolation (policies generated by Claude Code), www-data permission isolation.

Worth knowing

The single prompt is extremely minimal; actual effectiveness depends on Claude Code's codebase access and current context. Source did not show audit output or specific remediation actions. Author suggests a monthly 'security week'. Quoted post @sobedominik is background only, not used for methodology.

Steps

  1. Enter the security audit prompt in Claude Code

    In a Claude Code session with SSH or local access configured, navigate to the target VPS or website directory, enter the audit prompt, and execute it. Claude Code will perform security analysis based on its current codebase access and server permissions.

    Execution prompt · Source text。Claude Code chat input

    Do a full security audit of this website and server

Prompt you can copy

Execution prompt · Source text。Confirm the destination, input variables and output format before use.

This block is the prompt. Ads are never placed here.

Do a full security audit of this website and server

Enter the source audit prompt directly in Claude Code; no additional setup prompt is needed.

Source

在每台 VPS 和网站上让 AI 编码 Agent 跑一遍「全面安全审计」，作为常规防御 · levelsio · X · 2026-10-25T11:26:49.000Z

Comments & feedback

Tried this method? Share results, problems or improvements. Comments appear after moderation. Please avoid sensitive information.

Loading…

    Related