Suspicious files are quarantined, and scans can run on a schedule.
Security scanhotel-linde.example · scheduled weekly18,402 files · 41s
Findings
- Quarantined
- Quarantined
- Review
FeaturesSecurity
Key-only SSH, a default-deny firewall, fail2ban and automatic security updates are part of how every server is built. Malware scans you schedule per site watch them after launch.
Add firewall rules the way you would in the dashboard, then throw a brute-force attempt at SSH.
Firewall · fsn-web-01Everything else is denied
22/tcpAnywhereAllowDefault80/tcpAnywhereAllowDefault443/tcpAnywhereAllowDefault
fail2ban on SSH3 failed logins → banned for 2 hours
203.0.113.7 · password rejected203.0.113.7 · password rejected203.0.113.7 · password rejected203.0.113.7 banned until —
- Key-only SSH
- Password logins are off on every server Nuvlo builds.
- Default deny
- Only SSH, HTTP and HTTPS are open until you add a rule.
- Malware scans
- Webshell signatures, PHP in uploads, hidden eval and core checksums, with quarantine.
- Vulnerable dependencies
- Scans flag packages with known issues.
- Scoped API tokens
- View or manage access per area, and nothing else.
- Team roles
- Admin, Developer and Viewer, adjustable per role.
Is two-factor login available?
Yes. Turn it on in Settings with any authenticator app, and sign-in then asks for a six-digit code.
Can I still SSH in as root?
Yes, with your SSH key. Password logins are disabled.
Your first server and site are free, with no card and no time limit. Connect a provider token and Nuvlo starts building it.