Loading current advisories
dataThe public JSON feed is read-only. ZSEC clients create local TODOs from it and continue to apply only OS security updates through apt or dnf.
ZSEC keeps Linux servers patched against active threats while keeping the blast radius small: security packages, SSH lockout guardrails, fail2ban, local exposure checks, and read-only advisory TODOs.
Normalized CISA KEV and security-news signals for ZSEC review TODOs.
The public JSON feed is read-only. ZSEC clients create local TODOs from it and continue to apply only OS security updates through apt or dnf.
ZSEC is a standalone open-source project. FreeWebPanel can install it, but ZSEC does not depend on panel code.
curl -fsSL https://raw.githubusercontent.com/ResearchForumOnline/ZSEC/main/install.sh | sudo bash
sudo zsec status
Servers fetch /zsec/feed.json as data. Matching items become local TODOs in /var/lib/zsec/todo.txt. The feed can warn, but package managers decide security updates.