Loading...
Server security score: 4.9/10. I let AI audit everything and fix it — closing ports, hiding secrets, hardening SSL. Score jumped to 8.7 in 3 hours. Here's exactly how.
งานตรวจคุณภาพที่เคยกินเวลาเป็นวัน เราย่อให้เหลือหลักนาทีด้วยระบบเดียว
จุดเจ็บ: การตรวจคุณภาพใช้คนเยอะ น่าเบื่อ และพลาดง่ายตอนใกล้เส้นตาย ทีมเล็กยิ่งตรวจตามไม่ทัน
เดิมพัน: ของพังที่หลุดถึงมือผู้ใช้ ทำลายความเชื่อมั่นที่สร้างมานาน และแก้ทีหลังแพงกว่าหลายเท่า
สิ่งที่เราทำในแล็บ: Server security score: 4.9/10. I let AI audit everything and fix it — closing ports, hiding secrets, hardening SSL. Score jumped to 8.7 in 3 hours. Here's exactly how.
A server running 6 containers on 8GB RAM scored 4.9/10 in security — 6 ports wide open, SSH still using password auth, secrets exposed in process lists. Normally this requires hiring 5 specialists costing hundreds of thousands of baht per month. But with AI as a co-pilot, everything got fixed in 3 hours by one person.
Best for: Software developers, AI Coding tool enthusiasts, DevOps and System Admins managing infrastructure
One day, AI was asked to run a full system audit. The result: "Disk usage at 80%, 6 ports wide open, SSH still on password auth, secrets visible in ps aux"
Sounds heavy — but the interesting part is that everything got fixed in 3 hours with AI as a co-pilot. Not just "answering questions" but actually analyzing, planning, writing commands, and verifying everything from start to finish.
This is a real story — not an ad, not a demo — real work done on a production server.
A full server audit requires expertise from 5 different roles, from System Admin to Security Auditor:
A server that looks safe might have leaking ports and exposed secrets in process lists — only an AI audit catches everything
| Task | Role | Required Experience |
|---|---|---|
| Disk cleanup, Docker volume management | Infrastructure/SRE Engineer | Linux, Docker, disk management |
| Close ports, iptables, UFW | Cloud/Network Architect | Firewall, Docker networking |
| SSH hardening, hide secrets | DevSecOps Engineer | SSH, secrets management, security |
| Set up monitoring + alerts to Lark | SRE + Monitoring Specialist | Bash scripting, API, crontab |
| Design backup strategy + retention | Backup & DR Specialist | Docker volumes, tar, retention |
Cost of hiring these 5 roles? At minimum 150,000-300,000 baht/month (based on mid-level IT market rates in Thailand). Freelancers charge tens of thousands per engagement.
One person + AI took 3 hours. AI subscription cost: under 1,000 baht.
Many people think using AI means "ask a question, get an answer, copy/paste commands." That is not how it works.
AI does not just answer questions — it analyzes, plans, writes commands, and verifies everything from start to finish
What actually happens is giving AI direct access to the server via SSH, and it will:
docker stats, df -h, ufw status, ss -tlnp to understand the current stateIt is like having a team of 5 people working simultaneously, but in a single session.
No complex or lengthy prompts needed. Start simple:
The key is not a "good prompt" but "good context" — give AI SSH access and it finds everything on its own
"Audit the security and performance of this server. Give a before/after score, then fix everything."
That is it. AI organizes the work order on its own. The important thing is not "prompt quality" but "context quality" — give it SSH access to the server, and it finds all the data it needs.
Lessons learned:
Yes, but not the kind expected.
Problem 1: Docker bypasses UFW
AI closed ports in UFW, but they stayed open because Docker writes iptables rules directly, bypassing UFW entirely.
How AI handled it — it discovered on its own that DOCKER-USER chain rules were needed, then created /etc/rc.local to persist rules after reboot.
Problem 2: SSH got banned by CrowdSec
After switching SSH to key-only auth, multiple failed login tests triggered CrowdSec to ban the IP. Locked out completely.
How AI handled it — it used the Cockpit WebSocket channel (still open) to get in, unbanned the IP, then adjusted CrowdSec config to prevent re-banning.
Problem 3: cloud-init override
Password auth was disabled in sshd_config, but cloud-init (the cloud provider's provisioning system) re-enabled it on every reboot.
How AI handled it — found the file /etc/ssh/sshd_config.d/50-cloud-init.conf and fixed it at the source.
Notice a pattern? These are not just "knowledge" problems — they are multi-layered problem-solving that AI handles well because it sees the full picture, not just one piece at a time.
| Dimension | Before | After | Improvement |
|---|---|---|---|
| Security | 5.5/10 | 9.0/10 | +64% |
| Performance | 4.0/10 | 7.0/10 | +75% |
| Reliability | 6.0/10 | 8.0/10 | +33% |
| Backup & DR | 2.0/10 | 8.0/10 | +300% |
| Monitoring | 6.5/10 | 8.5/10 | +31% |
| Architecture | 4.0/10 | 6.0/10 | +50% |
| Integration | 6.0/10 | 7.5/10 | +25% |
| Overall Average | 4.9/10 | 7.7/10 | +57% |
What was actually accomplished in 3 hours:
One person + AI spent 3 hours doing the work of 5 specialists — for under 1,000 baht in subscription cost
AI helped raise the security score at near-zero cost
| Dimension | Hiring a Team | Using AI |
|---|---|---|
| Time | 1-2 weeks (meetings, surveys, reports) | 3 hours |
| Cost | 50,000-200,000 baht | Under 1,000 baht |
| Coverage | Good, but depends on experience | Checks every angle, never forgets |
| Quality | High (if talented people) | Good (but needs verification) |
| Context Understanding | Needs time to learn the system | SSH access = instant understanding |
| Repeatability | Must re-hire every time | Repeat anytime, on demand |
AI advantage: fast, affordable, thorough, repeatable
Human advantage: better at business context decisions, understands "why" not just "what"
Before getting excited about the results, the risks need to be clear:
1. AI might run dangerous commands without asking
For example rm -rf or iptables -F which could lock out access to the server. Prevention: set permissions requiring AI to confirm before running destructive commands.
2. AI does not understand business impact
It might shut down a service that "looks unnecessary" but actually has hidden dependencies. Prevention: review every change before applying.
3. Secrets in prompts
If AI has SSH access, it sees all passwords, API keys, and configs. Prevention: use AI that does not store conversation data, or set data retention policies.
4. "Looks correct" but might miss edge cases
AI gave a score of 7.7/10 which "looks good" but the remaining 2.3 points could be the entry point for an attack. Prevention: use AI as a first pass, then have experts review critical areas.
Golden rule: use AI to do the work — but if something goes wrong, the responsibility falls on the operator, not AI.
Based on this experience, the future path is clear:
Short term (now): AI serves as a "co-pilot" that speeds up work 10x, but still needs human oversight.
Medium term (6-12 months): AI will monitor and fix routine problems autonomously (e.g., disk full = auto-clear cache, container crash = restart + notify).
Long term (1-2 years): AI will "own" infrastructure fully — provisioning, deploying, monitoring, optimizing, scaling — with humans only setting policy.
Next steps:
Everything described here does not require senior engineer skills. The only requirements are:
The best people in this era are not those who know everything — but those who know where and how to use AI as a thinking partner
Start here:
That is all it takes to get started.
The most capable people in this era are not those who know everything — but those who know "where and how to use AI as a thinking partner" without losing accountability for the results.
Related articles:
Interested in AI + Development + Automation? Subscribe to Hi Logic Labs for in-depth articles, templates, and a community of people using AI in real work.
A: Primarily Cursor IDE + Claude AI. Tell AI to SSH into the server and run security audit scripts — check open ports (nmap), look for exposed secrets, verify file permissions, inspect SSL/TLS config. AI does all of this through the terminal in Cursor. No additional tools required.
A: The 5 roles are: Security Auditor (vulnerability scanning), System Administrator (close ports/fix configs), DevOps Engineer (fix Docker/Nginx), Database Admin (check Supabase permissions), and Compliance Officer (generate reports). AI handles all roles through Claude — just review and approve. Total time: 3 hours.
A: A score of 4.9/10 means the server has multiple critical vulnerabilities — unnecessary open ports, secrets exposed in environment variables, overly permissive file permissions, and unhardened SSL configuration. If scanned by an attacker, multiple entry points would be found.
A: Security score jumped from 4.9/10 to 8.7/10 within 3 hours. AI closed 12 unnecessary ports, hid all secrets, reset file permissions, added SSL hardening, and created new firewall rules. Everything was fully documented.
Last updated: March 21, 2026
#Database #Security #Chatbot #CursorAI #Server #Linux #AITools #PromptEngineering #AITools #Template #ClaudeAI #Optimization
สิ่งที่ได้ และหลักคิด
คุณภาพไม่ได้มาจากคนตรวจเยอะ แต่มาจากระบบที่ตรวจไม่มีลืม หลักคิดของเราคือ ให้ AI ถือเช็กลิสต์ ส่วนคนถือการตัดสินใจ
อยากเห็นระบบตรวจนี้ทำงานกับงานของคุณ — ดู ViberQC และลงชื่อรอรอบทดลองที่ hilogiclabs.com
Join Hi Logic Labs for premium Content, Templates and a quality Community
Sign Up
Blueprint for Viber teams — AI creates, tests, and optimizes ads across 6 platforms with 9 AI Agents + Thompson Sampling. Starting at $28/month.
Stop cloning repos for every team member. Git Worktree shares one codebase — disk dropped from 7.7 GB to 0.8 GB. Add new members in 5 seconds, zero extra disk.
A complete Cursor IDE guide covering 9 categories and 38 topics — from basics to advanced. Packed with ready-to-use prompt examples. Written for executives and business owners who aren't developers.