minaki

How it works

Minaki is the security a small team would set up for a Linux server, run for you and reported in plain English. One login, one bill, one report, and you approve every change.

Who this is for

Strong security is built and priced for big companies with their own security teams. If you run a VPS, a side project or a handful of Linux servers, the same protection is usually out of reach, and you end up doing it by hand or not at all.

Every job in Minaki is one you can do yourself with open-source tools. We list them honestly on Do it yourself. What you pay us for is the time and the joining-up: we install these jobs, keep them current, run them across all your servers, and tell you what matters in plain English, with fixes you approve. The price is $1 per server per month from MinakiLabs LLC.

One suite, four jobs

These are the parts of the suite. We only advertise a part as available once it is built and has passed testing. Today the malware scan is available; the other three are coming, one at a time.

Malware scan Available now

Finds the malware, miners and rootkits attacking Linux servers now, and removes what it can prove is there after you approve each fix. This is Minaki Scan.

Exposure scan Coming

Shows what an attacker can reach from outside your server: open ports, exposed services and missing patches.

Break-in watch Coming

Watches your sign-in and system logs for password-guessing and suspicious logins, and tells you before a foothold becomes a breach.

Threat intelligence Coming

Flags traffic from addresses our sensors already see attacking Linux servers. Phishing signals come later.

Where the protection comes from

Our own honeypot sensors pose as ordinary servers around the world and record real attacks on Linux every day. A rule-based analyst and published security research turn each attack into a check or a cure, a person reviews and approves it, and it is tested on an isolated machine before it reaches you. The numbers on our home page and on Caught this week are counted from those sensors, not invented. See how we test for the full method.

Why it is safe to let it run

A tool with access to your server has to earn it. Minaki is built so that nothing happens to your machine without your say-so.

  • Read-only by default. A scan only reads and reports. It changes nothing on its own.
  • You approve every change. A fix is applied only when you choose to, one at a time, and only after you approve that specific change. You can always copy the exact command and run it yourself instead.
  • Backups before every change, and a log. Before it edits or removes anything, it keeps a copy on your server, and it records every change it makes, with the command that undoes a setting change.
  • Undoable. Setting changes come with their undo command. Removed malware is kept as a copy that cannot run, in a folder only the administrator can open.

Our advice, and the way we build it: test on a server that is not in production first, and keep your own backups of every server. Minaki keeps a copy of what it changes, but that copy is not a backup of your server. You remain responsible for your systems and for the changes you approve.

Getting started

The malware scan is the part you can use first. See what the scanner does, read the honest install notes, and how pricing works. Sales open with the first signed release.