How ServerGuardAI Works

Your Dashboard, Updated Live

Within seconds of adding your server, live metrics start flowing to your dashboard. Everything you need to know at a glance, updated every 2 minutes.

• CPU & Memory: Current usage with visual gauges
• Disk usage: How full each partition is
• Load average: How busy the server is overall
• Top processes: Which programs consume the most resources
• Services: Nginx, Apache, MySQL, PHP-FPM, Redis, and more
• SSL Certificates: Auto-discovered domain certificates and expiry dates

Start, stop, or restart any service with a single tap, commands run directly on your server via SSH.

AI-Powered Diagnostics

Available on all plans, each analysis uses 1 AI credit. Two ways to ask. Tap Diagnose on an alert and you get one answer: what caused it, the evidence, and the one command that fixes it, with a plain verdict like “flat for a week, not urgent tonight”. Or tap Analyse on a server and the AI examines your metrics, logs, service status, and network connections, then gives you a ranked list you can work through:

• Performance issues: CPU bottlenecks, memory pressure, slow queries
• Security threats: Brute-force attacks, suspicious IPs, exposed ports
• Database problems: Slow queries, connection issues, misconfiguration
• Network anomalies: Unusual traffic patterns, DDoS indicators
• Storage concerns: Disk space, large files, log rotation

Each finding includes a confidence score, the root cause, supporting evidence, and a recommended fix with one-tap execution. The AI also provides verify and rollback commands. You always review the command first, nothing runs without your approval.

Disk full? You get a button that frees the space and tells you how much, not ten lines of advice. It only ever touches logs, journals, caches and crash dumps, never your sites or data, and it says so.

Findings you mark as fixed, expected, or not a real issue stay that way. Free gets 3 credits, Pro gets 10, Agency gets 75, all one-time, not monthly. Additional packs of 50 credits can be purchased anytime on any plan.

Checked Every Night, From Outside Your Website

Available on every plan, including Free. Switch it on per server and, every night, the agent checks each website on that server from outside the site itself, where a compromised plugin can’t switch it off or lie to it.

• Malware scan: Web shells, backdoors, injected scripts, and files that have no business being in your site folders
• Exposed files, proven not guessed: Backups, database dumps, .env files and .git folders are checked by actually fetching them from the internet, and only what could be reached is reported
• Admin tools left open: Database consoles and file managers reachable by anyone on the internet
• WordPress plugin and theme inventory: Everything installed, its version, what is out of date, and whether core and plugin files match the official releases
• Hidden WordPress administrator accounts: Accounts that exist in the database but are hidden from the admin screen
• Updates that don’t bury you: An update that touches 400 files shows up as one line, not 400 alerts

The malware scan, the exposed-file checks and the open admin-tool check run on every PHP site. Plugin inventory, release comparison and hidden-administrator detection are WordPress-specific today; Laravel, Symfony and CodeIgniter equivalents are on the roadmap.

Every scan leaves a receipt. You see what was checked, how many files, and when, not just that nothing was found. If a check didn’t run, you hear about that too. Fix something and the finding closes itself once the next check confirms it. Dismiss something and it stops asking.

The check runs at the lowest priority with a memory cap, at a random time in the early hours. On a 1-core test server with a full WordPress site it finished in about 90 seconds.