# CtrlOps > CtrlOps is a local-first desktop application for Linux server management, built for developers and DevOps teams who run multiple servers. It brings SSH, an AI-powered terminal with approve-before-execute safety, real-time monitoring, log access, automated backups, and one-click deployments onto one screen, so routine server work takes minutes instead of hours. Everything runs entirely on the user's local machine with no cloud sync. CtrlOps runs on macOS (Apple Silicon and Intel), Windows, and Linux. It connects to any Linux server over standard SSH with no agents, no plugins, and no changes required on the server. SSH keys and credentials are stored locally and never transmitted to third-party services. The AI terminal supports natural language commands and integrates with OpenAI, Google Gemini, Anthropic Claude, or any OpenAI-compatible provider via bring-your-own-key. Deployment time for Node.js, React, and Next.js apps is reduced from 60+ minutes to under 5 minutes. Pricing starts at $7/month with a 1-month free trial, no credit card required. ## Why CtrlOps - [Why CtrlOps](https://ctrlops.io/why-ctrlops): The case for consolidating server work into one app, told job by job - connecting to servers, deploying from GitHub, finding logs, running commands in plain English, moving files, offboarding and onboarding people, and scheduled S3 backups. Includes a jobs-based comparison against the usual multi-tool setup, and states plainly what CtrlOps does not do: no fan-out across servers, no log aggregation, and no backup restore. ## Getting Started - [Quick Start](https://ctrlops.io/docs/getting-started/quick-start): Install CtrlOps, activate your license, and connect to your first Linux server in under 5 minutes. - [Download & Install](https://ctrlops.io/docs/getting-started/download): Download links for macOS (Apple Silicon and Intel), Windows, and Linux with installation steps. - [Your First Connection](https://ctrlops.io/docs/getting-started/first-connection): Step-by-step guide to connecting CtrlOps to a Linux server using SSH key or password authentication. - [Migrate from Termius](https://ctrlops.io/docs/getting-started/migrate-from-termius): Move saved Termius servers into CtrlOps with the built-in importer. Reads hosts, ports, usernames, and SSH keys locally, no export file and no manual re-entry. ## Core Platform - [Server Management](https://ctrlops.io/docs/modules/server-management): Add, connect, and manage Linux servers from the Home dashboard. Quick-connect via SSH string, set a custom port or proxy, run the SSH setup wizard, and import/export your server list. Tag a server by environment and filter the home screen by it. Once connected, the header shows the role the session logged in with (Sudo, Standard, or Restricted) and the server's environment tag. - [SSH & Key Management](https://ctrlops.io/docs/modules/ssh-management): Manage authorized keys on a connected server, add, copy, and revoke access from a visual registry without using the terminal. Adding someone is one form: it creates the Linux user, sets the account role (Restricted, Standard, or Sudo) and authorizes their public key in a single step, with optional session restrictions that block port forwarding, agent forwarding, or X11 forwarding on that key. - [Access Management](https://ctrlops.io/docs/modules/access-management): Scan every server to see who can log in, offboard a person from all servers at once, and onboard new users to many servers with per-server roles. All data stays local. - [Security Audit](https://ctrlops.io/docs/modules/security-audit): Run any of 25 predefined security audits against a connected Linux server over SSH, covering the server itself, databases, Docker, and web servers. Each run returns a hardening score, a severity breakdown, and a downloadable PDF report. Findings can be handed to the AI Terminal, which writes the fix command and waits for approval. Read-only, no agent, no schedule - it is a configuration audit, not a vulnerability scanner or compliance attestation. - [SSH & Security](https://ctrlops.io/docs/core/ssh-security): How CtrlOps stores SSH keys locally, encrypts credentials, and enforces security best practices. - [Server Discovery & Setup](https://ctrlops.io/docs/core/server-discovery): Discover, group, and tag Linux servers by environment or role. Connect with one click. - [Permissions & Access Control](https://ctrlops.io/docs/core/permissions): Linux file permissions explained - read, write and execute for owner, group and others, chmod and chown, octal modes, and the special bits. All of it can be set from the File Manager's Permissions dialog instead of typing chmod. - [Infrastructure Details](https://ctrlops.io/docs/modules/infra-details): Real-time dashboard showing CPU, RAM, disk, and process stats across all connected servers. ## AI Terminal - [AI Terminal](https://ctrlops.io/docs/modules/ai-terminal): Full Linux terminal with an AI assistant that translates natural language to bash, explains commands, and suggests fixes. All commands require user approval before execution. Open several terminals on one server, each in its own tab that names itself after the command you ran. Read output as plain shell scrollback (Terminal view) or as one block per command you can copy, filter and re-run (Block view). Command suggestions are configurable, including what the Tab key does, whether the completions menu opens as you type, and inline autosuggestions. - [Scripts](https://ctrlops.io/docs/modules/ai-terminal/scripts): Save frequently used Linux commands as one-click scripts with variables, tags, and colours. Available across all connected servers. - [Web Search](https://ctrlops.io/docs/modules/ai-terminal/web-search): Enables the AI terminal to look up live documentation, error messages, and package versions in real time. Supports Tavily, Brave, and DuckDuckGo. ## Deployments & Operations - [Application Deployment](https://ctrlops.io/docs/modules/deployment): Deploy Node.js, React, or Next.js apps from GitHub to a Linux server using a guided form. No CI/CD setup required. - [PM2 Process Manager](https://ctrlops.io/docs/modules/pm2-process-manager): A GUI for PM2. See every PM2 process with live CPU, memory, event loop lag, and heap usage, then restart, reload, stop, or delete it in one click. Expand a cluster to manage individual instances, and stream a single process's logs live. No pm2 commands. - [Log Management](https://ctrlops.io/docs/modules/log-management): Read Linux server logs from a dedicated tab. CtrlOps auto-discovers every log file, groups them by web server and app, and lets you search, tail live, download, or clear them without SSH. - [File Manager](https://ctrlops.io/docs/modules/file-manager): Browse, upload, edit, and organise files on a Linux server via a visual drag-and-drop GUI with full root access. Set read, write and execute permissions for owner, group and others from a dialog instead of running chmod. A git bar along the bottom shows the branch, how far ahead or behind the remote it is, and what changed, with fetch, pull, push, commit, discard and branch switching as buttons, plus initialize and clone for a folder that is not a repository yet. A Terminal button opens a shell already in the folder you are browsing. - [Backups](https://ctrlops.io/docs/modules/backup): Schedule automatic Linux server backups to S3-compatible storage (AWS, Cloudflare R2, Backblaze B2, Wasabi, MinIO, DigitalOcean Spaces). Configure, schedule and monitor without writing rclone configs or cron. Copies files off the server; restoring is done from your own bucket. - [Cron Jobs](https://ctrlops.io/docs/modules/cron-jobs): Schedule work on a connected Linux server without writing cron syntax. A four-step panel sets the frequency, picks what runs (a shell command, a saved script from the Script Directory, or an HTTP request), and chooses which outcomes alert you. Cron jobs already on the server are listed and can be adopted in one click. Every run is kept with its full output, and failure, timeout, success or output-pattern alerts go to Slack, Telegram or a webhook. Alerts are installed into the job on the server, so they fire while CtrlOps is closed. - [Port Forwarding](https://ctrlops.io/docs/modules/port-forwarding): Create and manage SSH port forwards on a connected Linux server from a GUI, with no terminal open. Three types: local (reach a service behind the server firewall on your own machine), remote (publish something running on your machine to the server network), and dynamic (a SOCKS5 proxy that routes your browser through the server). Forwards are named, grouped, tested before saving, started and stopped in one click, and can start automatically when CtrlOps opens. An existing ssh -L command can be pasted in and imported. The tunnel rides the existing SSH connection, so nothing is exposed to the internet and no firewall rule changes. ## Features - [All Features](https://ctrlops.io/features): Overview of every CtrlOps capability, from SSH and the AI terminal through monitoring, logs, backups, and deployments. - [Multi-Server Management](https://ctrlops.io/features/multi-server-management): Manage all your Linux servers from one visual dashboard. Named cards, one-click connect, connection status. No spreadsheets. - [AI Terminal](https://ctrlops.io/features/ai-terminal): Ask your server anything in plain English. CtrlOps generates the Linux command and runs it only when you approve. Multiple terminal tabs per server, a block view that keeps each command with its own output for copying and re-running, and command suggestions you can tune or switch off. - [Infrastructure Monitoring](https://ctrlops.io/features/infra-monitoring): Monitor Linux servers in real time. Live CPU, memory, and disk gauges with no agent and no setup, running over SSH. - [Application Deployment](https://ctrlops.io/features/deployment): Deploy Node.js, React, and Next.js apps to a VPS with one click. Paste a GitHub repo, add env vars, and CtrlOps handles PM2, Nginx, and SSL. - [PM2 Process Manager](https://ctrlops.io/features/pm2-process-manager): A GUI for PM2. Live CPU, memory, event loop lag and restart counts for every process, then restart, reload, stop or delete it in one click. Expand a cluster to manage single instances. No alerting and no metric history - it is a control panel, not an APM. - [File Manager](https://ctrlops.io/features/file-manager): Manage server files visually - upload, download, edit, and unzip over SSH through a GUI file manager for any Linux server. Set file permissions from a checkbox grid, run git from a status bar along the bottom, and open a terminal in the folder you are browsing. - [SSH Key Management](https://ctrlops.io/features/ssh-management): Manage SSH keys on every server from a visual registry. Add keys, revoke access, and set each account's role - Restricted, Standard, or Sudo - in the same form that authorizes the key, with no manual editing. - [Access Management](https://ctrlops.io/features/access-management): See exactly who has SSH access to every server. Grant, revoke, and audit access from one screen, with no agents needed. - [Security Audit](https://ctrlops.io/features/security-audit): Run 25 predefined security audits on a Linux server over SSH, covering the server, databases, Docker, and web servers. Every run returns a hardening score, a severity breakdown, and a downloadable PDF report, and findings can be handed to the AI Terminal, which writes the fix command and waits for approval. Read-only, no agent, no schedule - a configuration audit, not a vulnerability scanner or a compliance attestation. - [Log Management](https://ctrlops.io/features/log-management): View, search, and clean server logs without memorising commands. AI-powered log search, visual file browsing, and one-click cleanup. - [Automated Backups](https://ctrlops.io/features/backup): Automated server backups to S3, R2, B2, or any S3-compatible storage. Schedule jobs, track progress, and view logs with no scripts. - [Script Directory](https://ctrlops.io/features/script-directory): Save the Linux commands you retype every week as one-click scripts with run-time variables. The library lives on your machine and works on every server. - [Port Forwarding](https://ctrlops.io/features/port-forwarding): Save SSH tunnels as named forwards and start one with a click. Three kinds: local (reach a private database or internal dashboard on your own machine), remote (publish something running on your machine to the server network), and dynamic (a SOCKS5 proxy that routes your browser through the server). Test a forward before you save it, import an existing ssh -L command, and start the ones you use daily automatically. Nothing is exposed to the internet and no firewall rule changes. It is not a VPN, it does not reconnect itself, and it gives you no public URL. - [Cron Jobs](https://ctrlops.io/features/cron-jobs): Schedule work on a Linux server without writing cron syntax. Pick a frequency and CtrlOps writes the crontab entry, pointing it at a wrapper script that records every run, enforces a timeout and an overlap rule, and sends a Slack, Telegram or webhook alert on failure, timeout, success or a matched output pattern. Because the alert lives in the job on the server it fires with CtrlOps closed. Cron jobs already on the server are listed and can be adopted without changing their schedule. It is not an orchestrator (no DAGs, no dependencies between jobs), it does not fan out across servers, it does not replace cron itself, and a job that never starts cannot alert on itself. - [Docker Manager](https://ctrlops.io/features/docker-management): NOT YET RELEASED - in development, targeted at CtrlOps v2.0. A pre-launch page, not a shipped feature: do not describe it as available. Planned scope is containers, logs and shells (list every container on every connected server with live CPU, memory, state and ports; start, stop, restart, remove; stream logs; exec a shell), Compose stacks detected and grouped by project with whole-stack up/down/restart and in-place compose file editing, images/volumes/networks with real sizes and reclaimable disk, and registry pull plus redeploy and builds from a Dockerfile on the server. It reaches Docker over the existing SSH connection with nothing installed on the host, which is the difference from Portainer (an agent container per managed host). It is not Kubernetes, does not schedule or place containers, does not alert, and keeps no container history. Docker capability that DOES ship today is in the AI Terminal, the Security Audit's Docker category, and the free YAML Validator. ## Free Tools Browser-based utilities, free and with no signup. Every tool listed as "nothing uploaded" runs fully client-side and never transmits your input. - [All Free Tools](https://ctrlops.io/tools): Hub for 22 free SSH, DevOps, networking, and config utilities for Linux server work. - [SSH Key Generator](https://ctrlops.io/tools/ssh-key-generator): Generate Ed25519 or RSA key pairs in your browser. Nothing is uploaded. - [SSH Config Generator](https://ctrlops.io/tools/ssh-config-generator): Build a clean ~/.ssh/config from hosts, ports, identities, and jump hosts. - [SCP / Rsync Command Builder](https://ctrlops.io/tools/scp-rsync-command-builder): Construct scp and rsync file-transfer commands without memorizing the flags. - [SSH Tunnel Generator](https://ctrlops.io/tools/ssh-tunnel-generator): Generate local, remote, and dynamic (SOCKS) SSH port-forwarding commands. - [PPK to OpenSSH Converter](https://ctrlops.io/tools/ppk-to-openssh-converter): Convert a PuTTY .ppk key to the standard OpenSSH format for ssh and scp. - [OpenSSH to PPK Converter](https://ctrlops.io/tools/openssh-to-ppk-converter): Convert an OpenSSH key to PuTTY .ppk format for PuTTY, Pageant, and WinSCP. - [SSL Certificate & CSR Decoder](https://ctrlops.io/tools/ssl-certificate-decoder): Decode certificates, CSRs, and chains - expiry, SANs, fingerprints, chain order. Nothing uploaded. - [Chmod Calculator](https://ctrlops.io/tools/chmod-calculator): Convert Linux file permissions between octal and symbolic notation and copy the chmod command. - [Cron Expression Generator](https://ctrlops.io/tools/cron-expression-generator): Build and decode crontab schedules with a plain-English preview. - [Nginx Config Generator](https://ctrlops.io/tools/nginx-config-generator): Generate an nginx server block for a reverse proxy, static site, SPA, or PHP - with SSL. - [Systemd Service Generator](https://ctrlops.io/tools/systemd-service-generator): Build a systemd .service unit with hardening, resource limits, and an optional timer. - [curl Command Builder](https://ctrlops.io/tools/curl-command-builder): Assemble curl requests with headers, methods, auth, and data from a form. - [Base64 Encoder / Decoder](https://ctrlops.io/tools/base64-encoder-decoder): Encode and decode Base64 - text, files, and data URIs - with URL-safe and UTF-8 support. - [Uptime / SLA Calculator](https://ctrlops.io/tools/uptime-sla-calculator): Turn an SLA percentage into allowed downtime per day, month, and year. - [YAML to JSON Converter](https://ctrlops.io/tools/yaml-to-json-converter): Convert YAML to formatted JSON in your browser - indent, sort keys, multi-document. Nothing uploaded. - [JSON to YAML Converter](https://ctrlops.io/tools/json-to-yaml-converter): Convert JSON to clean, readable YAML in your browser - 2 or 4 space indent, sort keys. Nothing uploaded. - [YAML Validator](https://ctrlops.io/tools/yaml-validator): Validate YAML with schema checks for Kubernetes, Compose, GitHub Actions, and Ansible - precise errors, lint warnings, one-click format. Nothing uploaded. - [JWT Decoder & Verifier](https://ctrlops.io/tools/jwt-decoder-verifier): Decode a JWT and verify its signature - header, payload, claims, and expiry, with HS256/RS256/ES256/PS256 support. Nothing uploaded. - [CIDR / Subnet Calculator](https://ctrlops.io/tools/cidr-subnet-calculator): Calculate network range, mask, and host counts from CIDR notation. - [htpasswd Generator](https://ctrlops.io/tools/htpasswd-generator): Create bcrypt/apr1 basic-auth credentials for nginx and apache. - [DNS Record Lookup + SPF/DMARC/DKIM Checker](https://ctrlops.io/tools/dns-record-lookup): Look up DNS records and audit SPF, DMARC, DKIM, MX, MTA-STS, and BIMI - pass/fail with fixes. Runs from your browser via DNS-over-HTTPS. - [VPS Security Scanner](https://ctrlops.io/tools/vps-security-scanner): Scan a server for exposed ports, weak TLS, missing security headers, and email-spoofing gaps - graded A to F with fixes. Only public hosts, nothing stored. - [sshd_config Analyzer](https://ctrlops.io/tools/sshd-config-analyzer): Paste an sshd_config and get a graded A to F hardening review with the exact line to fix. Handles Match blocks and Include drop-ins. Runs in the browser. - [Nginx Config Analyzer](https://ctrlops.io/tools/nginx-config-analyzer): Paste an nginx config for a graded A to F security review. Catches the add_header inheritance trap that silently drops security headers, alias path traversal, weak TLS and missing headers. Runs in the browser. - [authorized_keys Analyzer](https://ctrlops.io/tools/authorized-keys-analyzer): Paste an authorized_keys file for a graded A to F review. Shows every key with its SHA256 fingerprint, reads the options field (restrict, from, command, expiry-time, cert-authority) that other parsers ignore, and flags keys nobody can account for. Runs in the browser. ## Security Checklist Reference pages that publish the exact pass, warning and failure thresholds CtrlOps applies when it audits a server. Every threshold is transcribed from the audit script that runs it, and a build check fails if a page and its script disagree. - [Security Checklist hub](https://ctrlops.io/security-checklist): All 25 audits and 157 checks, grouped into server, database, web server and Docker. - [Linux Server Security Audit Checklist](https://ctrlops.io/security-checklist/vps): The 7 server audits (45 checks) - SSH and access, firewall and network, services and processes, file system, application security, system updates, logging and monitoring. - [Database Security Audit Checklist](https://ctrlops.io/security-checklist/database): The 6 database audits (37 checks) for MySQL, MariaDB, PostgreSQL, MongoDB and Redis - authentication, network isolation, least-privilege permissions, transport encryption, credential storage and hardening. - [Web Server Security Audit Checklist](https://ctrlops.io/security-checklist/web-server): The 6 Nginx and Apache audits (36 checks) - security headers, TLS configuration, content exposure, configuration hardening, identification and patching, logging and monitoring. - [Docker Security Audit Checklist](https://ctrlops.io/security-checklist/docker): The 6 Docker audits (39 checks) - daemon and socket exposure, image vulnerabilities, volume permissions, runtime and resources, container hardening, network and supply chain. - [SSH & Access Security Audit Checklist](https://ctrlops.io/security-checklist/vps/ssh-access): The 11 SSH and access checks CtrlOps runs on a Linux server - root login, password auth, port, idle timeout, authorized keys, extra UID 0 accounts, sudo group members, passwordless sudo, login restrictions, crypto algorithms and password ageing. Each check has the manual command, the exact PASS/WARN/FAIL thresholds, and the fix. - [Application Security Audit Checklist](https://ctrlops.io/security-checklist/vps/application-security): The 5 application-layer checks CtrlOps runs on a Linux server - SSL certificate expiry, certbot renewal automation, end-of-life runtimes, database account exposure and host resources. Each check has the manual command, the exact PASS/WARN/FAIL thresholds, and the fix. - [Linux File System Security Audit Checklist](https://ctrlops.io/security-checklist/vps/filesystem): The 7 file system checks CtrlOps runs on a Linux server - world-writable files, set-id binaries in user-writable paths, the /tmp sticky bit, system log permissions, blank-password accounts, shadow and passwd modes, and files owned by deleted users. Each check has the manual command, the exact PASS/WARN/FAIL thresholds, and the fix. - [Network Security Audit Checklist](https://ctrlops.io/security-checklist/vps/firewall-network): The 6 firewall and network checks CtrlOps runs on a Linux server - firewall state, allow rules open to the world, Docker containers bypassing the firewall, externally listening ports, IPv6 coverage and outbound policy. Each check has the manual command, the exact PASS/WARN/FAIL thresholds, and the fix. - [Logging & Monitoring Audit Checklist](https://ctrlops.io/security-checklist/vps/logging-monitoring): The 3 logging and monitoring checks CtrlOps runs on a Linux server - Fail2Ban brute-force protection, log rotation health, and failed SSH login volume in the last 24 hours. Each check has the manual command, the exact PASS/WARN/FAIL thresholds, and the fix. - [Services & Processes Audit Checklist](https://ctrlops.io/security-checklist/vps/services-processes): The 9 services and processes checks CtrlOps runs on a Linux server - unneeded services, running service count, root-owned external listeners, download-and-execute cron persistence, systemd timers, clock synchronisation, auditd, AppArmor/SELinux and kernel hardening sysctls. Each check has the manual command, the exact PASS/WARN/FAIL thresholds, and the fix. - [System Updates Audit Checklist](https://ctrlops.io/security-checklist/vps/system-updates): The 4 system update checks CtrlOps runs on a Linux server - pending security and general updates, automatic security updates (unattended-upgrades / dnf-automatic), running kernel versus newest installed kernel, and pending reboot state. Each check has the manual command, the exact PASS/WARN/FAIL thresholds, and the fix. - [Database Authentication Audit Checklist](https://ctrlops.io/security-checklist/database/authentication): The 8 database authentication checks CtrlOps runs across MySQL/MariaDB, PostgreSQL, MongoDB and Redis - blank root password, anonymous users, passwordless accounts, remote root, pg_hba trust/cleartext/md5 methods, password_encryption, MongoDB authorization and Redis requirepass. Each check has the manual command, the exact PASS/WARN/FAIL thresholds, and the fix. - [Database Credential Storage Audit Checklist](https://ctrlops.io/security-checklist/database/credential-storage): The 4 credential storage checks CtrlOps runs on a Linux server - credential-bearing config files inside web roots, world-readable permissions on those files, .git directories under a web root, and per-user database client credential files. Each check has the manual command, the exact PASS/WARN/FAIL thresholds, and the fix. - [Database Hardening Audit Checklist](https://ctrlops.io/security-checklist/database/hardening): The 7 configuration and hardening checks CtrlOps runs on MySQL, PostgreSQL, MongoDB and Redis - database engines running as root, installer defaults (the MySQL test database and PUBLIC CREATE on the PostgreSQL public schema), pending engine security patches, transaction log placement, scheduled backups, backup file permissions and backup encryption at rest. Each check has the manual command, the exact PASS/WARN/FAIL thresholds, and the fix. - [Database Least-Privilege Audit Checklist](https://ctrlops.io/security-checklist/database/least-privilege): The 6 least-privilege checks CtrlOps runs on MySQL and PostgreSQL - accounts with a wildcard host, non-system accounts holding FILE, secure_file_priv and local_infile file-access settings, accounts holding SUPER, PostgreSQL superuser roles beyond postgres, and host rules accepting connections from any address. Each check has the manual query, the exact PASS/WARN/FAIL thresholds, and the fix. - [Database Network Isolation Audit Checklist](https://ctrlops.io/security-checklist/database/network-isolation): The 7 network isolation checks CtrlOps runs on a Linux server - installed engine inventory, MySQL bind-address and skip_networking, PostgreSQL listen_addresses, MongoDB bindIp, Redis bind plus protected-mode, database ports listening on external interfaces (3306, 5432, 27017, 6379, 1433, 9200, 11211), and phpMyAdmin/Adminer/pgAdmin footprints. Each check has the manual command, the exact PASS/WARN/FAIL thresholds, and the fix. - [Database Transport Encryption Audit Checklist](https://ctrlops.io/security-checklist/database/transport-encryption): The 5 transport encryption checks CtrlOps runs on MySQL, PostgreSQL and MongoDB - require_secure_transport enforcement, MySQL server certificate expiry within 30 days, PostgreSQL ssl graded against listen_addresses, PostgreSQL certificate expiry, and the MongoDB TLS mode graded against bindIp. Each check has the manual command, the exact PASS/WARN/FAIL thresholds, and the fix. - [Docker Daemon & Socket Audit Checklist](https://ctrlops.io/security-checklist/docker/daemon-socket): The 8 daemon and socket checks CtrlOps runs on a Linux host - engine and runc inventory, daemon exposed over TCP (2375 fails, 2376 warns), docker.sock mounted into containers, docker group members, debug log level, rootless mode, user namespace remapping and container log rotation limits. Each check has the manual command, the exact PASS/WARN/FAIL thresholds, and the fix. - [Docker Image Vulnerability Audit Checklist](https://ctrlops.io/security-checklist/docker/image-vulnerabilities): The 8 image checks CtrlOps runs on a Linux host - critical and high CVEs via trivy, floating :latest tags, secrets embedded in image layers, images with no USER instruction, signature verification, known end-of-life base images, build best practices via dockle, and SBOM generator availability. Each check has the manual command, the exact PASS/WARN/FAIL thresholds, and the fix. - [Docker Volume Permissions Audit Checklist](https://ctrlops.io/security-checklist/docker/volume-permissions): The 7 volume checks CtrlOps runs on a Linux host - containers bind-mounting sensitive host paths, read-write mounts including a writable docker.sock, world-writable volume data directories, volumes owned by orphaned UIDs, the mode on /var/lib/docker/volumes, dangling volumes and read-only root filesystem enforcement. Stopped containers are inspected too. Each check has the manual command, the exact PASS/WARN/FAIL thresholds, and the fix. - [Docker Runtime & Resources Audit Checklist](https://ctrlops.io/security-checklist/docker/runtime-resources): The 6 runtime checks CtrlOps runs on a Linux host - containers running seccomp=unconfined, AppArmor or SELinux confinement on the host and per container, and missing memory, CPU and PID limits plus unbounded restart=always policies. Each check has the manual command, the exact PASS/WARN/FAIL thresholds, and the fix. - [Docker Container Hardening Audit Checklist](https://ctrlops.io/security-checklist/docker/container-hardening): The 5 container hardening checks CtrlOps runs on a Linux host - containers running --privileged, missing no-new-privileges, containers running as root graded against userns-remap, dangerous added capabilities or a retained default capability set, and writable container root filesystems. Each check has the manual command, the exact PASS/WARN/FAIL thresholds, and the fix. - [Docker Network & Supply Chain Audit Checklist](https://ctrlops.io/security-checklist/docker/network-supply-chain): The 5 network and supply chain checks CtrlOps runs on a Linux host - containers publishing ports on 0.0.0.0 past UFW, the default bridge with inter-container communication enabled, secret-like environment variables visible in docker inspect, pending docker/containerd/runc package updates, and running containers on unpinned images with no scanner installed. Each check has the manual command, the exact PASS/WARN/FAIL thresholds, and the fix. ## Audit Fixes 19 fix pages, one per check, of the 157 checks the CtrlOps security audit runs - the rest are being published in batches and are not live yet. Each page states the exact file or command the check reads, the threshold that separates a pass from a failure, why a correctly configured host sometimes still fails, the remediation, and commands to verify the fix independently. Where a check is known to be wrong, the page says so. Full text for every page: https://ctrlops.io/audit-fixes/llms-full.txt - [Audit Fixes hub](https://ctrlops.io/audit-fixes): All 157 checks across 25 audits, plus what PASS, WARN, FAIL and SKIP each mean. A SKIP is never a pass. - [Known issues](https://ctrlops.io/audit-fixes/known-issues): The 8 checks whose logic has drifted from the software they audit - MySQL have_ssl removed in 8.4, Docker Content Trust retired, Let's Encrypt OCSP responders switched off, stale end-of-life version lists, per-container Docker log limits, MongoDB --auth detection, PostgreSQL pg_wal mount detection and the pg_hba separate-netmask form. Each with the vendor source and the result to trust instead. - [Linux Server Audit Fixes](https://ctrlops.io/audit-fixes/vps): Fixes for the 45 server checks - SSH and sudo access, firewall rules, exposed services, file permissions, pending patches and logging. - [Database Security Audit Fixes](https://ctrlops.io/audit-fixes/database): Fixes for the 37 database checks across MySQL, MariaDB, PostgreSQL, MongoDB and Redis - authentication, network binding, privileges, TLS and credential storage. - [Web Server Audit Fixes](https://ctrlops.io/audit-fixes/web-server): Fixes for the 36 Nginx and Apache checks - TLS protocols and ciphers, security headers, directory listing, exposed dotfiles, version disclosure and logging. - [Docker Security Audit Fixes](https://ctrlops.io/audit-fixes/docker): Fixes for the 39 Docker checks - daemon socket exposure, privileged containers, image vulnerabilities, volume permissions and resource limits. ## Pricing - [Pricing](https://ctrlops.io/pricing): Full plan comparison with features included in each tier. - Monthly plan: $7/month (Rs. 499/month for India) after a 1-month free trial, no credit card required - unlimited servers, all core features, email support, regular updates. - Yearly plan: $70/year (Rs. 4,999/year for India) after a 1-month free trial, no credit card required, saves 16.7% - includes priority support and advanced analytics. - Lifetime plan: $149 one-time (Rs. 9,999 one-time for India) - lifetime access to CtrlOps Pro, including every future feature and lifetime premium support, with no renewals. - Enterprise / Custom: contact for pricing - custom deployment, dedicated support, and VIP SLA. - Free trial: 1 month, every Pro feature unlocked, no credit card required and no auto-charge at the end. ## Blog - [AI in DevOps: Replacing Manual Server Management (2026)](https://ctrlops.io/blog/ai-in-devops): Before-and-after workflows showing how AI terminals and real-time monitoring replace manual server operations, with reported 80% time savings. - [Best SSH Client for Mac 2026](https://ctrlops.io/blog/best-ssh-client-mac-2026): Comparison of six SSH clients on macOS including iTerm2, Termius, Warp, OpenSSH, and CtrlOps across security, features, and pricing. - [DevOps Automation Tools: The Complete 2026 Guide](https://ctrlops.io/blog/devops-automation-tools): Review of 15 DevOps automation tools with a phased automation roadmap and server operations layer analysis. - [How to Manage Multiple Servers in 2026](https://ctrlops.io/blog/manage-multiple-servers-without-losing-control): SSH workflows, server organisation patterns, and deployment systems for teams managing production infrastructure. - [Best Alternatives to PuTTY, Webmin & ServerPilot for 2026](https://ctrlops.io/blog/putty-webmin-serverpilot-alternatives): Comparison of modern replacements for legacy SSH and server management tools. - [8 Best SSH Clients for Linux in 2026 (Free & Paid)](https://ctrlops.io/blog/best-ssh-client-linux): Hands-on test of 8 Linux SSH clients including OpenSSH, Termius, Tabby, Warp, and CtrlOps across features, security, and pricing. - [9 Best SSH Clients for Windows in 2026 (Free & Paid)](https://ctrlops.io/blog/best-ssh-clients-windows): Hands-on test of 9 Windows SSH clients including PuTTY, MobaXterm, Termius, Warp, and CtrlOps across features, security, and pricing. - [Top 5 MobaXterm Alternatives for Mac in 2026](https://ctrlops.io/blog/mobaxterm-alternatives-mac): MobaXterm does not run on Mac. Compares CtrlOps, Termius, Royal TSX, Warp, and iTerm2 against real tasks. - [7 Best PuTTY Alternatives for Windows in 2026 (With AI)](https://ctrlops.io/blog/putty-alternatives-windows): Seven PuTTY alternatives for Windows in 2026, including free options and AI-powered tools. - [PuTTY vs MobaXterm vs Warp Alternative (2026)](https://ctrlops.io/blog/putty-mobaxterm-warp-alternative): PuTTY vs MobaXterm vs Warp compared on pricing, AI features, and file management for a 5 to 25 server fleet. - [14 SSH Key Management Best Practices (2026)](https://ctrlops.io/blog/ssh-key-management-best-practices): Ed25519 keys, passphrases, per-user access, instant revocation, and a complete audit checklist for developers. - [7 Best SecureCRT Alternatives for Mac in 2026 (With AI)](https://ctrlops.io/blog/securecrt-alternatives-mac): SecureCRT on Mac has no AI, file manager, or monitoring. Compares CtrlOps, iTerm2, Termius, Warp, Royal TSX, Tabby, and DartShell. - [7 Best Termius Alternatives for Mac in 2026 (With AI)](https://ctrlops.io/blog/termius-alternatives-mac): Termius is SSH-only with cloud credentials on paid plans. Compares CtrlOps, iTerm2, Warp, Tabby, Royal TSX, WindTerm, and Core Shell. - [9 Best Termius Alternatives in 2026 (Tested & Ranked)](https://ctrlops.io/blog/termius-alternatives): Termius stops at SSH with no deployment, monitoring, or AI. Compares CtrlOps, Tabby, Warp, MobaXterm, iTerm2, PuTTY, Royal TS/TSX, WindTerm, and SecureCRT on pricing, platforms, and features. - [How to Deploy a Node.js App on a Linux VPS in 5 Minutes (2026)](https://ctrlops.io/blog/deploy-nodejs-app-linux-vps): Full 13-step manual deployment guide covering PM2, Nginx, SSL, and env variables, plus one-click deployment in under 5 minutes. - [PuTTY vs MobaXterm in 2026: 7 Real-World Tests](https://ctrlops.io/blog/putty-vs-mobaxterm): PuTTY and MobaXterm compared across 7 real-world tests covering connection speed, SFTP, credential security, and AI features. - [How to Deploy a Next.js App on a Linux VPS in 5 Minutes (2026)](https://ctrlops.io/blog/deploy-nextjs-app-linux-vps): Full 13-step manual guide covering the production build, NEXT_PUBLIC_ variables, PM2, Nginx, and SSL, plus one-click deployment in under 5 minutes. - [How to Deploy a React App on a Linux VPS in 5 Minutes (2026)](https://ctrlops.io/blog/deploy-react-app-linux-vps): Full 12-step manual guide covering the production build, Nginx SPA routing, and SSL, plus one-click deployment in under 5 minutes. - [7 Best aaPanel Alternatives for Developers (2026)](https://ctrlops.io/blog/aapanel-alternatives): aaPanel free allows one admin and Pro costs $28.80/mo per server. Compares CtrlOps, CloudPanel, HestiaCP, CyberPanel, Coolify, RunCloud, and Webmin on pricing, team access, and data privacy. - [Termius vs Kiro CLI vs CtrlOps: Best Termius AI Alternative in 2026](https://ctrlops.io/blog/ai-terminal-tools-server-management): Termius AI, Kiro CLI, and CtrlOps compared on where the AI runs, multi-step execution, approval controls, and server-side footprint. - [13 Linux Server Management Best Practices (2026)](https://ctrlops.io/blog/linux-server-management-best-practices): SSH hardening, deny-by-default firewalls, automated updates, systemd, monitoring, versioned backups, and a troubleshooting checklist, with commands for Ubuntu and RHEL. - [Web-Based vs. Local SSH Clients: Which Is Better in 2026?](https://ctrlops.io/blog/web-based-vs-local-ssh-client): Web-based and local SSH clients compared on latency, private key storage, audit logging, and offline access, with a decision framework for developers. ## Compare - [All Comparisons](https://ctrlops.io/compare): Hub for every CtrlOps side-by-side comparison against SSH clients, control panels, and deployment tools. - [CtrlOps vs Warp](https://ctrlops.io/compare/ctrlops-vs-warp): A Warp alternative that manages remote servers, not just a local terminal, with cross-platform SSH and an AI terminal. - [CtrlOps vs Termius](https://ctrlops.io/compare/ctrlops-vs-termius): A Termius alternative with 1-click deployments and local-first security, all in one desktop workspace. - [CtrlOps vs aaPanel](https://ctrlops.io/compare/ctrlops-vs-aapanel): CtrlOps and aaPanel compared side-by-side for teams managing multiple servers with AI-assisted operations. - [CtrlOps vs MobaXterm](https://ctrlops.io/compare/ctrlops-vs-mobaxterm): A MobaXterm alternative for Mac, Linux, and Windows with 1-click deployments and local-first security. - [CtrlOps vs RunCloud](https://ctrlops.io/compare/ctrlops-vs-runcloud): A RunCloud alternative with AI-assisted operations, 1-click deployments, real-time monitoring, and local-first security. - [CtrlOps vs SecureCRT](https://ctrlops.io/compare/ctrlops-vs-securecrt): A SecureCRT alternative with AI-assisted operations, one-click deployments, monitoring, and backups. - [CtrlOps vs Dokploy](https://ctrlops.io/compare/ctrlops-vs-dokploy): A Dokploy alternative with a desktop workspace, AI-assisted operations, 1-click deployments, and local-first security. - [CtrlOps vs PuTTY](https://ctrlops.io/compare/ctrlops-vs-putty): A PuTTY alternative with tabs, an AI terminal, deployments, a file manager, and native macOS and Linux apps. - [CtrlOps vs Royal TS](https://ctrlops.io/compare/ctrlops-vs-royalts): A Royal TS alternative for developers - AI-assisted operations, 1-click deployments, and Linux monitoring without the admin overhead. - [CtrlOps vs Webmin](https://ctrlops.io/compare/ctrlops-vs-webmin): A Webmin alternative with a native desktop workspace, an AI terminal, and 1-click deployments instead of a browser control panel on every server. ## Case Studies - [Customer Case Studies](https://ctrlops.io/case-studies): Verified customer results with real numbers - every story names the customer and links to the full case study or original public post. - [Spirex Infoways Case Study](https://ctrlops.io/case-studies/spirex-infoways): How a 9-person IT services team cut multi-server changes from 2 hours to under 10 minutes with CtrlOps - 6 servers on one screen instead of 6 separate aaPanel logins, a saved script that is one click on each server instead of a retyped command, and an AI terminal with approval that removed the one-person DevOps bottleneck. - [Olbuz Case Study](https://ctrlops.io/case-studies/olbuz): How a 27-person IT consulting company in Ahmedabad moved 4 servers off Cyberduck, FileZilla, and Notepad-stored credentials into one local desktop app covering terminal, files, deployments, backups, and infra monitoring - backups no longer wait on a developer, and infra details are visible without a panel on the VPS. - [Softnoesis Case Study](https://ctrlops.io/case-studies/softnoesis): How an IT consulting company in Surat, India connected every active server across 8+ client projects in a single 6-minute setup - credentials for 15-20 servers moved out of a notepad file that took minutes to search, log management moved to one screen, and infra monitoring on high-traffic servers replaced manual checks. - [Ughareja Infotech Case Study](https://ctrlops.io/case-studies/ughareja-infotech): How a 3-person IT consulting firm serving ecommerce clients moved 6 servers off Termius to CtrlOps in under 2 minutes - after an AI command ran without a safety check and a missed payment cost them data with no export path. The AI terminal now runs locally on their own API key with approval before every command, infra monitoring and one-click deployment replaced manual checks and aaPanel, and the setup costs $70/user/year against Termius Pro at $120. ## Product & Community - [Reviews](https://ctrlops.io/reviews): Verified user reviews of CtrlOps collected from Product Hunt, X, Reddit, LinkedIn, and G2, with the reviewer's role and original post linked. - [Changelog](https://ctrlops.io/changelog): Every CtrlOps release with its features and fixes. Current release is v1.1.5 (2026-09-16), adding cron jobs you schedule without writing cron syntax, with a Slack, Telegram, or webhook alert the moment a run fails, port forwarding that reaches a private database or internal dashboard through named local, remote, or SOCKS tunnels, several terminal tabs per server with output read as one block per command, git controls and checkbox file permissions in the File Manager, and one-step user access that sets a role while authorizing the key, plus role and environment badges on the connected server header. - [Product Roadmap](https://ctrlops.io/roadmap): What is planned, in progress, and shipped in CtrlOps. In progress: Docker container management and monitoring alerts. Planned: a database manager, two-factor auth for SSH, and a mobile companion app. Already shipped and live in the app: security audit reports, PM2 process management, the Termius importer, log management, multi-tab workspace, and Vault Lock. - [Support](https://ctrlops.io/support): Help centre and contact routes for CtrlOps, including email support at support@ctrlops.io. - [Get an AI API Key](https://ctrlops.io/get-api-key): How to obtain and connect an API key for OpenAI, Google Gemini, Anthropic Claude, or any OpenAI-compatible provider used by the AI terminal. ## Optional - [AI Not Responding](https://ctrlops.io/docs/troubleshooting/ai-not-responding): Fix the AI assistant when it fails to reply, refuses commands, or returns errors. Covers API keys, model settings, and rate limits. - [Backup Not Running](https://ctrlops.io/docs/troubleshooting/backup-not-running): Diagnose backup jobs that fail to start, crash mid-run, or miss their schedule. - [Connection Issues](https://ctrlops.io/docs/troubleshooting/connection-issues): Resolve SSH connection failures including timeouts, key errors, and firewall rules for AWS, GCP, Azure, and DigitalOcean. - [Authors](https://ctrlops.io/author): The CtrlOps team behind the DevOps and server-management guides, engineers who build and run production infrastructure. - [Daxesh Italiya](https://ctrlops.io/author/daxesh-italiya): Co-Founder & CTO of TST Technology and technical lead behind CtrlOps. Writes about server reliability, SSH, and deployment workflows. - [Hiren Kalariya](https://ctrlops.io/author/hiren-kalariya): Co-Founder & CEO of TST Technology and product lead behind CtrlOps. Writes about Linux server management, SSH, and practical DevOps. ## Full Content - [Everything (docs + blog + case studies)](https://ctrlops.io/llms-full.txt) - [Complete documentation](https://ctrlops.io/docs/llms-full.txt) - [Complete blog posts](https://ctrlops.io/blog/llms-full.txt) - [Complete case studies](https://ctrlops.io/case-studies/llms-full.txt)