Once a month, have Claude Code run a security audit on your servers
levelsio spent a whole day typing the same line into Claude Code on every VPS: "Do a full security audit of this website and server", then tightened auto-updates, isolation and account permissions.
Start step 1 ↓The problem
Solo founders and small teams who run their own sites on rented VPSs rarely check security on a schedule. The author acted after another founder said one of his companies was hit by an AI-driven attack.
AI tools used
Tap a tool to see what it is and which other cases use it
What to prepare
- Tailscale
- Your VPS and sites
How to do it
- 1
Run the same line on every server
This is the exact line the author typed on every VPS and site. Before it changes anything, read what it plans to do and approve it yourself.
Prompt - 2
Turn on automatic security updates
The author runs unattended security upgrades on Ubuntu with automatic reboot; he says a reboot takes about 4 minutes, which is fine every few weeks.
- 3
Isolate the machines and don't run services as root
Each VPS sits on Tailscale with access policies Claude Code generated, and web services run as www-data instead of root.
- 4
Put it on the calendar once a month
The author proposes one "security week" a month. The prompt below is our addition so you keep a record each time.
Prompt