SvrGuard keeps reading your server's logs, finds the attacking sources with its built-in rules, and blocks them at your system firewall within minutes.
Built for freelancers, small teams and NAS owners looking after several machines.
Open your access log and it's full of /wp-login.php, /.env, /phpMyAdmin — things you never installed. That's not traffic; it's probing. Someone is methodically testing every possible way into your server.
You can look up IPs and add firewall rules by hand. Tomorrow there's a fresh batch, and the day after that. You can't win this fight manually — a machine should be watching the logs.
SvrGuard's approach is direct: scan the system logs on a schedule, match them against attack-signature rules, and when it is an attack, write the block into the firewall.
This is the attack map from a production server in real use (captured 2026-10-20). In the 70 days to 2026-10-17 it detected and blocked 4,272 addresses from 72 countries on its own. Your server faces the same crowd.
There from the start [Free]: detection, blocking, the local console, attack alerts, and watching your own machines on the Hub once they are bound.
You can also subscribe to [Pro]: the threat address database and binary updates delivered automatically, plus deeper views.
Not a slogan — tested with industry-standard pentest tools and in real-world situations.
10 attack classes mapped to OWASP / CWE / MITRE ATT&CK — detection fires and the source really lands in the kernel firewall.
Two common situations: tired of hand-maintaining block rules, and a host turned into a miner — see what it does for you.
It solved a real operations problem first and became a product afterward — and why existing tools did not fit.
