Launching today on Product Hunt
Your homelab is fifteen Linux boxes you own.
None of them have been audited in months.
Noxen is a Mac app that runs nightly agentless audits of your remote Linux fleet over SSH. CVEs, weak SSH config, expiring TLS, exposed admin panels - caught the morning after. Mac-native. No SaaS round-trip. $12/month, free tier for 3 hosts.
What it is
The Mac control plane for your homelab security
Connect to your Linux boxes over SSH on your existing keys.
Inventory what's installed. Run a port + admin-surface probe.
Audit your sshd_config and TLS. Match everything
against a daily-rebuilt CVE feed from NVD and
OSV.dev. The morning-after report tells you what changed on
your fleet overnight.
- Mac-native.No Electron, no Docker, no web dashboard. The app is the control plane.
- Agentless.Reuses your existing SSH keys. Nothing installed on the boxes you scan.
- No SaaS round-trip.Inventory + findings live on your Mac. There is no Noxen cloud to compromise.
- Homelab pricing.Free for 3 hosts. $12/month or $120/year for 50.
Pricing - at a glance
Free for 3 hosts. One plan for everything else.
Why we built it
The gap between two bad options
Homelab security has been stuck between
(a) apt list --upgradable on every box every
Saturday and (b) pay enterprise-scanner pricing for
tools that weren't built for fleets you actually own.
Noxen is the missing middle: Mac-native, agentless,
homelab-priced.
The data sources are public - we never enrich, never re-score, never invent. The signing keys are bundled in the app and verified before any record touches your local store. The bundle ships notarised by Apple. Nothing about how this works is closed-source magic; the docs spell out every byte path.
What it deliberately isn't
Not an exploit tool. Noxen flags exposed Grafana / phpMyAdmin / Pi-hole panels but never authenticates against them. That's a product decision; defence-in-depth research, not a credential-test framework.
Not a compliance product. Findings are evidence, not certifications. CIS Controls v8 / SOC 2 / ISO 27001 mappings are included as evidence supplements when you need them, not as claims you can hand to an auditor unedited.
Final word
Try it free. No credit card.
The free tier covers 3 hosts and never expires. Beyond that, one plan covers 50 hosts for $12/month or $120/year, with the daily CVE feed and scheduled scans included. The 30-day trial needs no card.