# RainServer security

Source: https://raincleaner.eu/rainserver/security/

- Agent reads: metrics, service state and journal, package state, Docker state, firewall/SSH/fail2ban config, backup results.
- Never collects: SSH private keys, passwords, environment variables, database contents, files in /home.
- Transport HTTPS only; per-server secret; every action and licence signed with Ed25519; passwordless email-code sign-in; data stored on our own servers.
- Report issues to security@raincleaner.eu (see /.well-known/security.txt).

**Is RainServer an antivirus?**
No. The security module checks configuration and posture: SSH, firewall, updates, open ports, permissions. It is not a malware scanner, an intrusion detection system or a replacement for a security team.

**Do you have SOC 2 or ISO 27001?**
No. We are a small team and we will not claim certifications we do not have. What we can do is publish how the product works and keep it inspectable.

**Can the web dashboard run commands on my server?**
Only actions from a fixed list, each with typed parameters, a preview and a policy check. There is no text box that sends shell commands to your server.