Kastell is a free, open source CLI tool that handles server provisioning, security hardening, auditing, and maintenance for self-hosted servers across Hetzner, DigitalOcean, Vultr, and Linode.

How do I install Kastell?

Run 'npx kastell' or install globally with 'npm install -g kastell'. No configuration required.

What security checks does Kastell perform?

Kastell runs 413 security checks across 29 categories including SSH, Firewall, Docker, TLS, HTTP Headers, Kernel, Authentication, and more. It supports CIS, PCI-DSS, and HIPAA compliance mapping.

Kastell — Open Source Server Security & Infrastructure CLI

Name: Kastell
Author: Kastell

Kastell handles server provisioning, security hardening, maintenance, and monitoring — so you don't have to. One tool. Every server. Every task.

Top 5 Features

Server Provisioning — Deploy on Hetzner, DigitalOcean, Vultr, and Linode with one command
Security Auditing — 413 checks across 29 categories, CIS/PCI-DSS/HIPAA compliance
Production Hardening — 19-step lockdown: SSH, fail2ban, UFW, sysctl, auditd, AIDE, Docker
MCP Integration — 13 tools for AI-powered server management via Claude Code
Fleet Management — Monitor, maintain, and secure all servers from one CLI

Quick Start

Install: npx kastell or npm install -g kastell

Audit a server: kastell audit root@your-server-ip