01 · COLLECT
Agent or checks
A Go agent pushes metrics, inventory and open ports over HTTPS. Or skip it and probe with ICMP, TCP, HTTP and SSH.
Monitoring · Vulnerability scanning
Know what is down. Know what is exploitable.
THEAI watches your servers with ICMP, TCP, HTTP and SSH checks or a lightweight Go agent, then matches every installed package against OSV.dev and ranks the findings by KEV, EPSS and CVSS.
MITDocker ComposeGo agentGrafana
$ git clone https://github.com/iwebbo/THEAI
$ cd THEAI && docker compose up -d
# dashboard, agent API and Grafana
$ _
Illustration.
How it works
From a host to a ranked fix list.
02 · INGEST
THEAI API
Authenticated with JWT. Stores status history, response times and the package inventory of each host.
03 · CORRELATE
OSV.dev matching
Installed packages on Debian, Ubuntu and Alpine are matched to advisories, with patched versions attached.
04 · PRIORITIZE
KEV, then EPSS, then CVSS
Findings are sorted so actively exploited issues come first. Browse them in the UI or in Grafana.
Agentless checks (ICMP, TCP, HTTP/HTTPS, SSH) feed the same API, so mixed fleets live in one dashboard.
Features
The six things you will actually use.
CHECKS
Four protocols, one view
ICMP ping, TCP ports, HTTP/HTTPS with custom ports and paths, and SSH with authentication — each with response-time tracking and status history.
AGENT
Optional Go agent
Runs on Linux, Windows, AIX, BSD and macOS. Reports CPU, memory, swap, load, disks, network, uptime, open ports and installed packages.
CVE
Prioritized, not just listed
Package inventory matched against OSV.dev and ordered by KEV, EPSS and CVSS so the first line is the one to fix today.
DASHBOARDS
Grafana, pre-provisioned
Monitoring and CVE dashboards appear automatically alongside the built-in real-time interface.
SCANS
Re-scan on your terms
Trigger a scan from the UI or let it run every VULN_SCAN_INTERVAL_HOURS. Large fleets scan in the background.
EXPOSURE
Ports and TLS
Flags dangerous open ports, validates HTTPS configuration and detects protocol-specific weaknesses.
Every capabilityexpand
Platform
- Real-time dashboard — responsive overview of server status
- Server management — add, edit, delete and configure targets
- Automated checks — configurable intervals
- Settings panel — intervals, alerts and preferences
- Themes — customizable interface
- Authentication — JWT login with an environment-configured default user
Monitoring
- Agent metrics — CPU, memory, swap, load, disks, network, uptime
- ICMP ping — connectivity and response time
- TCP — availability on custom ports
- HTTP/HTTPS — service checks with custom ports and paths
- SSH — connectivity with authentication support
- History — status changes tracked over time
Vulnerabilities
- CVE correlation — OSV.dev source with patched versions
- Critical ports — dangerous open ports identified
- SSL/TLS check — HTTPS protocol validation
- Advanced port scan — service detection and version analysis
- Technology assessment — installed services and versions
- Reporting — descriptions with severity ratings
- Execution — synchronous results or asynchronous background scans
Built withGoPythonReactDockerLinuxGrafana
Star or fork on GitHub ↗