SecureLunaSecureLuna
Launch · 90% off

Quiet checks.Daily reports.Always on.

Daily automated baseline checks (KISA · CIS · NIST · GB/T) — plus custom commands on a schedule (coming soon) so you can run and collect any check you need. Five-minute setup with one SSH key.

Start free with 1 serverView pricing

No credit card required · 1 server free forever

How it works

Five minutes to your first report.

Self-service. No agent installed on your servers — just a public SSH key you place yourself.

1. Register your server

Add a Linux host you operate (label, host, SSH user, port).

2. Install our public key

Append the key we generate to your server's ~/.ssh/authorized_keys.

3. Daily checks run quietly

Each night, SecureLuna runs read-only configuration checks against KISA, CIS, NIST, and GB/T checklists.

4. Report by morning

Pass/fail per item, prioritized findings, and a PDF in your inbox before 7 AM.

What you'll see

Your morning report, at a glance.

Pass / fail per check, prioritized findings, and a single compliance score — all delivered before 7 AM.

● ActiveDaily 03:00 KST

web-prod-01

10.0.x.x · Ubuntu 24.04

Compliance score

92

Pass 122Fail 10
  • SSH & Access14/16
  • Kernel & sysctl22/24
  • Filesystem11/12
  • Logging & audit9/10

Daily report

May 14 · 132 checks across 4 standards

🌐 CIS🇰🇷 KISA🇺🇸 NIST
  • High

    SSH root login enabled

    Set PermitRootLogin no in /etc/ssh/sshd_config and reload sshd.

  • Med

    Kernel parameter net.ipv4.ip_forward = 1

    Disable if this host is not routing traffic intentionally.

  • ✓ Pass

    120 / 132 — 91%

Preview · sample dataTry with 1 free server →

Roadmap

Your AI Security Analyst.

SecureLuna evolves from a daily report into an AI analyst that watches over your infrastructure while you sleep.

SoonAI configuration analysis

Large-language-model summaries of your daily report — what changed, what matters, what to do first.

SoonRisk prioritization

Findings ranked by exploitability and asset criticality so you fix the right things first.

SoonSuggested fix guides

Step-by-step remediation written for your specific OS, package versions, and configuration.

SoonOperational best-practice tips

Curated guidance on hardening posture, drift control, and audit-readiness.

SoonCompliance score

A single moving score across KISA / CIS / NIST / GB/T so progress is visible to non-technical stakeholders.

SoonTrend tracking

30-day and 12-month trend lines per asset and per check item.

Our security promise

Four commitments before you trust us with SSH.

Adding a server to SecureLuna means giving us a key to your home. Here is exactly what we do — and don't — with that key.

Private keys are sealed

Each asset's private key is encrypted at rest with AES-256-GCM using a server-side key. Decryption only happens in memory during a scheduled run.

Read-only checks

Baseline scans only run cat/grep/ss-style commands against config files, sysctl, and service states. Nothing is written, installed, or modified.

Data stays where you'd expect

Reports and findings live on our own infrastructure (no third-party data warehouse). You can hard-delete your tenant and everything in it at any time.

Revoke anytime

Remove the SecureLuna line from your server's ~/.ssh/authorized_keys and access is cut off immediately. No support ticket required.

Free

$0

1 server · Forever free

  • · KISA + CIS + NIST + GB/T checklists
  • · Daily configuration report
  • · 30-day result retention

Get started

90% OFF

Pay-as-you-go

$29.9
$2.99

per server / month (90% off)

  • · Everything in Free
  • · Email + Slack daily delivery
  • · Locked-in price for 6 months
  • · Multi-user / role-based access

Get started

FAQ

Questions we hear most often.

Quick answers about SSH safety, billing, and how SecureLuna handles your data.

How is my SSH access protected?
We generate a dedicated public key for each asset and you paste it into your server's ~/.ssh/authorized_keys yourself. The matching private key is encrypted at rest with AES-256-GCM using a server-side key, and never leaves our infrastructure. You can revoke access at any time by removing the line from authorized_keys.
What commands run on my server? Is it read-only?
Yes. Baseline checks are read-only — they inspect configuration files, sysctl values, and service states via cat/grep/ss-style commands. Nothing is written, installed, or modified. Custom scheduled commands (coming soon) will require explicit per-command approval.
Where are my reports and findings stored?
PostgreSQL hosted on our own infrastructure. Daily reports are emailed via Resend (with verified DKIM/SPF). You can delete your tenant and all associated data at any time from the account settings — this is a hard delete, not a soft delete.
How does pricing and refund work?
1 server is free forever — no credit card. Beyond that, USD $2.99/server/month (90% launch discount). Payments go through Polar. Refunds within 7 days of the most recent charge, no questions asked.
Is the free tier really permanent?
Yes. 1 asset, daily checks, and PDF report — free forever. We use the free tier to demonstrate the product; we'd rather you trust us than chase a 7-day trial.
Which standards are mapped?
KISA U-series (Korean baseline · ISMS-P), CIS Controls L1 (global), NIST SP 800-53 (US federal), and GB/T 22239 (China level protection 2.0). Each finding shows badges for the standards it maps to.

Security news

Today's signal in cybersecurity.

Curated daily by an AI analyst at 1 AM KST — only the items that actually matter.

No curated news yet. Check back after the next Mon/Wed/Fri 1 AM KST run.

Contact

Need help? Get in touch.

Tell us about your environment and what you'd like to know — we'll reply within 1 business day. Inquiries in any language are auto-translated to Korean for our team.