Noxen audits your remote Linux fleet nightly over SSH. CVEs, weak SSH, rotting TLS, exposed admin panels - caught the morning after. Mac-native. Agentless. Your data stays on your Mac. $79 one-time, free tier for 3 hosts. No subscription required.
No reviews yetBe the first to leave a review for Noxen - Mac CVE scanner for homelabs
Maker
📌
Hey Product Hunt 👋
I built Noxen because I got tired of the gap between two bad options for homelab security: (a) apt list --upgradable on every box manually, or (b) pay enterprise scanner pricing for tools that weren't built for fleets you actually own.
What it does
Mac app that connects to your Linux boxes over SSH on your existing keys, inventories what's installed, runs a port + admin-surface probe, audits your sshd_config and TLS, and matches everything against a daily-rebuilt CVE feed from VulnCheck NVD++ and OSV.dev. The morning-after report tells you what changed on your fleet overnight.
What makes it different
- Mac-native. No Electron. No Docker. No web dashboard. The app is the control plane.
- Agentless. Nothing installed on the boxes you're scanning. Decommission a host? Just remove it from Noxen's list. No drift.
- No SaaS round-trip. Your inventory + findings live in SwiftData on your Mac, synced privately across your other Macs via iCloud if you opt in. There is no Noxen cloud to compromise.
- $79 one-time for 25 hosts (Noxen 1.x). Optional subscriptions for daily CVE feed updates ($19/mo) or team features ($149/mo). Free tier covers 3 hosts with no credit card.
What it deliberately isn't
- Not an exploit tool. Noxen flags exposed Grafana/phpMyAdmin/Pi-hole panels but never authenticates against them. That's a product decision, not a limitation - turning every homelab scanner into a credential-test framework is how the industry got noisy.
- Not a compliance product. Findings are evidence, not certifications. CIS Controls v8 / SOC 2 / ISO 27001 mappings are included as evidence supplements when you need them, not as claims.
Who it's for
Homelabbers with 5-50 Linux boxes. Solo sysadmins managing a small consultancy fleet. DevOps folks who want to know what regressed on their VPSs overnight without standing up Wazuh.
What's live today
v1.0.0 - signed Developer ID build, notarised, distributed via Sparkle for in-place updates. Paddle is the merchant of record (handles VAT/sales tax in 80+ jurisdictions). Free download at https://noxen.app - same DMG for free and paid users; the license key just unlocks tier features.
One ask
Drop your worst homelab security war story below - the CVE that lived on your "I'll get to it eventually" list for too long, the time you found a Pi-hole on 0.0.0.0, the openssh you didn't know was still 8.7. I'll walk through whether Noxen would have caught it (honest answer either way).
- Noxen Team