cxs License — ConfigServer eXploit Scanner

What sets cxs apart is less its signature list than its timing. A nightly scan lets a shell uploaded at 3am run for hours; the watch daemon listens to filesystem changes through the kernel (inotify) and inspects a file as it is written, whether it arrived through an HTTP upload form, over FTP, or from a script already running on the box. The rules are written for hosting environments: PHP shells, obfuscated code, phishing kits, mailer scripts, known vulnerable plugin files. A match can be quarantined, logged for review, or reported to the account owner — you choose which in the configuration. It earns its place on shared and reseller servers with constant upload traffic, on machines full of WordPress installs, and anywhere you accept files from customers.

Ordering is short: you enter the server's IP, the cost comes off your prepaid balance, and the license is normally live within a minute — there is no approval step in between. On the server you run a single install command, and because the script validates by IP there is no license code or key file for you to store. If you refresh hardware or move to another provider, you type the new address into the panel yourself and the old one stops working at that moment — no ticket, no waiting on anyone. Balance topped up with crypto is credited automatically; bank transfers are confirmed by a person. If you run dozens of servers, hand the whole lifecycle to the REST API — create, renew, suspend, change address — and call it from your own build script. Every call is recorded in your account history with its result, which makes it easy to see later which license is running on which machine.

A few things are worth knowing before you install. First, cxs is a scanner, not a firewall: it inspects files, it does not block login attempts or network attacks. Second, real-time watching only sees files written after it starts, so run one manual full scan straight after installation to deal with whatever is already on disk, then schedule periodic scans alongside the live watcher. Third, on servers with a very large number of watched directories you may need to raise the kernel's watch limit, and full scans consume disk and CPU, so keep them out of peak hours. Check that your control panel and Linux distribution are supported before you order — just ask if you are not sure. Licensing is per server and bound to a single address; a monthly license runs to the end of the paid period, auto-renewal can be switched off in the panel, and there is no contract term or cancellation fee.