hostcloak.com · defensive only · guides
Strangers do not need your password to see presence: which ports answer, whether TLS looks healthy, which headers your site returns, whether an admin-looking page is hanging on a public address.
That public view is the part HostCloak is built to grade — so you can quiet the easy stuff first.
Authorized hosts only. Not a pentest. Not a compliance certificate. No root password.
HostCloak Surface Guard answers “what can the internet already see?” on a host you own:
Live Deck (Pro) optionally adds CPU, RAM, disk, and IN/OUT bandwidth via an outbound agent — still no root password.
Free: $0 · 1 host · 1 successful scan/day.
No. It is a defensive presence and hygiene read with a harden order. We do not ship attack procedures.
Solo operators and VPS owners who want to stay off easy radar — including people running small apps or AI agent stacks on a single box.
Google or magic link at /login. Stripe billing is inside /app.
Next step: name a DNS name or public IP you own at /scan. Quiet what's loud on a host you own.
Defensive posture only — presence, hygiene, and fix order. Not a pentest. Not a compliance certificate. HostCloak never asks for a root password. Scan only hosts you own or have written authorization to assess.