ServerAudit

ServerAudit

When did you last audit your server?

ServerAudit scans your server with a single command and shows exactly what an attacker would love to find - with a 0-100 safety score, severity ratings and a concrete fix for every issue.

🛡 What it checks

• Server software - outdated builds, Log4Shell-era versions (CVE-2021-44228)
• server.properties - offline mode risks, RCON exposure, whitelist
• spigot.yml - legacy BungeeCord forwarding mode
• ops.json - operator hygiene
• Permissions - wildcards (*, bukkit.*, minecraft.*) on players and LuckPerms groups
• Plugin versions - matched against a vulnerability database you can extend with your own advisories in vulndb-extra.yml

📊 How you see it

• Safety score with a visual bar
• Severity-rated findings - hover any issue for the explanation and the fix
• In-game GUI with clickable issues
• Discord webhook - push scan reports to your staff channel
• PlaceholderAPI placeholders for scoreboards and TAB

⌨ Commands

🧩 Placeholders

%serveraudit_score%  %serveraudit_issues%  %serveraudit_critical%
%serveraudit_high%  %serveraudit_medium%  %serveraudit_low%  %serveraudit_lastscan%

⚙ Built for modern servers

• Paper 1.21.x, fully async scanning - zero main-thread work
• No hard dependencies - PlaceholderAPI and LuckPerms are optional hooks
• Minimal footprint, no database required

🆓 Free, no strings

No trials, no crippled features, no nag screens. Just run /audit scan and see where your server stands.