Hacker News Reader

If you are on AWS, their Inspector tool is easy to setup and use, and runs can be automated with AWS Lambda. https://aws.amazon.com/inspector/

Yes, I'm a security consultant and we often run this on client machines during security tests. It provides a nice assessment of the machine.

I am a total security novice, but I do have a Linux VPS that I host some low importance stuff on. Would running a tool like this be appropriate?

Think about the headache of remaking the VPS from scratch, rehosting everything on it and having to reset any password that is shared with another environment.

Also consider the cost of dealing with the data falling into the wrong hands. Even data that is not personal can hurt you financially in the long-term.

The cost of running security tools is minimal when you take it all into account.

I guess I wasn't clear. I know I should be doing some sort of security testing, I am just curious if this tool is appropriate.

I've used it on occasion to check hosts on an ad hoc basis, but never got around to putting in a more automated/permanent fix.