{"opensite":"0.1","url":"https://threatcrush.com/","canonical":"https://threatcrush.com/","site":{"name":"ThreatCrush","web":"https://threatcrush.com"},"kind":"product","title":"ThreatCrush","description":"All-in-one security agent for builders. ThreatCrush is a Continuous Threat Exposure Management (CTEM) platform that monitors, detects, scans, and protects servers in real time — open-source CLI, daemon, desktop app, and hosted dashboard.","image":{"url":"https://threatcrush.com/banner.png"},"language":"en","tags":["ctem","exposure management","vulnerability management","intrusion detection","cybersecurity","server security"],"feeds":["https://threatcrush.com/blog/rss.xml"],"published_at":null,"modified_at":null,"fetched_at":"2026-10-19T10:46:44.091Z","status":"live","source":"read","cards":{"og":{"title":"ThreatCrush — Security Agent for Linux Servers","description":"Open-source security agent for Linux servers: detects attacks in logs and connections, bans attackers at the firewall, checks hardening and scans code.","url":"https://threatcrush.com","site_name":"ThreatCrush","image":"https://threatcrush.com/banner.png","type":"website"},"twitter":{"card":"summary_large_image","title":"ThreatCrush — Security Agent for Linux Servers","description":"Open-source security agent for Linux servers: detects attacks in logs and connections, bans attackers at the firewall, checks hardening and scans code.","image":"https://threatcrush.com/banner.png"}},"jsonld":[{"@context":"https://schema.org","@type":"Organization","name":"ThreatCrush","alternateName":"Profullstack ThreatCrush","url":"https://threatcrush.com","logo":"https://threatcrush.com/logo.svg","description":"All-in-one security agent — monitor, detect, scan, and protect servers in real time. Continuous Threat Exposure Management (CTEM) platform with CLI, daemon, desktop app, and hosted dashboard.","email":"hello@threatcrush.com","foundingDate":"2025","parentOrganization":{"@type":"Organization","name":"Profullstack, Inc.","url":"https://profullstack.com"},"contactPoint":[{"@type":"ContactPoint","contactType":"customer support","email":"hello@threatcrush.com","url":"https://threatcrush.com/hire","availableLanguage":["English"]},{"@type":"ContactPoint","contactType":"security","email":"security@threatcrush.com"},{"@type":"ContactPoint","contactType":"investor relations","email":"invest@threatcrush.com","url":"https://threatcrush.com/investors"},{"@type":"ContactPoint","contactType":"sales","email":"gov@threatcrush.com","areaServed":"US","description":"Government & defense sales"}],"sameAs":["https://github.com/profullstack/threatcrush","https://www.npmjs.com/package/@profullstack/threatcrush","https://www.linkedin.com/company/profullstackinc"]},{"@context":"https://schema.org","@type":"WebSite","name":"ThreatCrush","url":"https://threatcrush.com","description":"Open-source security agent for Linux servers, with a cloud dashboard and a module store.","publisher":{"@type":"Organization","name":"ThreatCrush","url":"https://threatcrush.com"},"inLanguage":"en","potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://threatcrush.com/blog?q={search_term_string}"},"query-input":"required name=search_term_string"}},{"@context":"https://schema.org","@type":"SoftwareApplication","name":"ThreatCrush","alternateName":"@profullstack/threatcrush","applicationCategory":"SecurityApplication","applicationSubCategory":"Continuous Threat Exposure Management (CTEM)","operatingSystem":"Linux, macOS, Windows","url":"https://threatcrush.com","downloadUrl":"https://www.npmjs.com/package/@profullstack/threatcrush","installUrl":"https://threatcrush.com/install.sh","description":"Open-source security agent: live attack detection, automatic firewall bans, hardening checks, code scanner, pentest checks, network monitor, and a module marketplace. Ships a CLI, systemd daemon, TUI and desktop app, with a mobile app and browser extension in development.","publisher":{"@type":"Organization","name":"ThreatCrush","url":"https://threatcrush.com"},"license":"https://opensource.org/license/mit","image":"https://threatcrush.com/banner.png","screenshot":["https://threatcrush.com/images/gallery-cli.png","https://threatcrush.com/images/gallery-tui.png","https://threatcrush.com/images/gallery-desktop.png","https://threatcrush.com/images/gallery-mobile.png"],"featureList":["Live attack detection (OWASP CRS rules for SQLi, XSS and more; brute force, port scans, DNS tunneling)","Automatic IP bans via nftables, iptables or fail2ban, escalating for repeat offenders","Host hardening checks","Code vulnerability scanner (secrets, code patterns, OSV dependency advisories, SARIF output)","Pentest checks for URLs and APIs","Inbound-connection monitor — port scans & SYN floods","Email, Slack, Discord, PagerDuty and webhook alerts","Cloud dashboard for linked servers","systemd daemon — runs 24/7"],"offers":{"@type":"Offer","availability":"https://schema.org/PreOrder","priceCurrency":"USD","price":"0","description":"Private beta — contact sales for pricing.","url":"https://threatcrush.com/hire"}},{"@context":"https://schema.org","@type":"FAQPage","mainEntity":[{"@type":"Question","name":"What does \"Lifetime Access\" mean?","acceptedAnswer":{"@type":"Answer","text":"Pay once, access forever. No subscriptions, no renewals. You get the full ThreatCrush platform — CLI, daemon, scanner, pentest engine, API — and all future updates for life."}},{"@type":"Question","name":"Can I use it today?","acceptedAnswer":{"@type":"Answer","text":"Yes. The CLI and daemon are open source (MIT) and install with one command. The dashboard and desktop app are in beta, the browser extension is a dev preview, and the mobile app is in development. Join the waitlist to hear about each release."}},{"@type":"Question","name":"What servers does it support?","acceptedAnswer":{"@type":"Answer","text":"Any Linux server. ThreatCrush reads your nginx, SSH (auth.log), syslog and journald logs, and watches inbound connections to the ports you serve — not just web traffic. `threatcrush init` detects SSH, nginx, Apache, PostgreSQL, MySQL, Redis and BIND and writes a config for them."}},{"@type":"Question","name":"What payment methods do you accept?","acceptedAnswer":{"@type":"Answer","text":"Credit/debit cards (processed by Stripe through CoinPayPortal), and cryptocurrency (BTC, ETH, USDT, SOL, and more) via CoinPayPortal."}},{"@type":"Question","name":"Can I get a refund?","acceptedAnswer":{"@type":"Answer","text":"Yes. If you're not satisfied within 30 days of getting access, we'll refund your payment in full. No questions asked."}},{"@type":"Question","name":"Do you work with government agencies?","acceptedAnswer":{"@type":"Answer","text":"Talk to us at gov@threatcrush.com about your requirements. The agent runs entirely on your own Linux servers, and detection and banning work without the cloud."}}]}]}