Plug in 2 servers or 200. Servor brings the terminal, monitoring, status pages, alerts and runbooks together. Servor AI steps in when the job gets complicated — it proposes, you approve, it verifies.
Discovery tested on
001 · The AI agent
You pick the trust level for each session. The AI always respects the boundary.
Why is web-01 eating so much RAM?
Top 3 consumers on web-01.eu:
• nginx — 1.4 GB · high cache buffer
• node worker — 820 MB · steady
• rsyslog — 410 MB · abnormal (×4 baseline)
002 · The product
Discovery, monitoring, status pages, incidents, runbooks and notifications. All built to chain together — not to be bought separately.
01Discovery
As soon as a server is added, a discovery job queries the system and catalogs everything running on it. You see at a glance what you're standing on — and so does the AI.
OS
Ubuntu 24.04 LTS
Kernel
6.8.0-45-generic
Arch
x86_64
Runtime
docker · podman
Active systemd services
Listening ports
Monitor suggestions
HTTP 200 on :80, TCP :5432, SSL cert /etc/letsencrypt/live/*, ICMP ping, log pattern ERROR in nginx access.log
Create the 5 monitors →02Monitoring
Not just a ping. HTTP with parsing, TCP/port, SSL expiration, DNS, ICMP ping, shell command, log pattern, container health, certificate chain. All distributed via BullMQ.
Hysteresis: 2 fails to go down, 3 successes to go up. Anti‑flap.
03Status pages
Compose your pages with business components (payments, API, dashboard) wired to monitors. Custom domain with TLS provisioned automatically by Caddy.
All systems operational
Updated 12 seconds ago
Application
Payments
Communication
Custom domain
status.acme.com
TLS
Auto · 78d left
Subscribers
1,234 emails · double opt‑in
04Incidents
Open an incident manually or let monitoring do it automatically when a check flips to down. Post updates, map impacted components, communicate to subscribers.
High latency on the payments API
14:32 · investigating
Latency spike detected on /charges
14:38 · identified
DB connection saturated, scaling read‑replicas
14:46 · monitoring
Latency back to normal, observing before closing
05Presets
Twenty-odd official presets (nginx, postgres, fail2ban, docker, k8s, security). Each is a typed sequential plan with variables, snapshot, verify and rollback. Build your own in minutes.
06Notifications
Email, Slack, Discord, arbitrary webhook. Define which actions trigger which routes, with anti‑noise cooldown and channel testing before production.
when
incident.created (impact >= major)
Slack #ops + Email oncall
testedwhen
monitor.down (sustained 2 fails)
PagerDuty webhook
testedwhen
preset.run.completed
Discord #infra
testedwhen
ai.plan.approved (risk: high)
Email manager
testedChannels
Email · Slack · Discord · Webhook
Cooldown
10 min per rule
003 · How it works
Built for juniors who are learning and seniors who want to save time. The same four steps, whether you run one VPS or fifty servers.
SSH or lightweight agent
Add your servers with a standard SSH key. For machines behind a VPN or NAT, a lightweight agent installs in 30 seconds and initiates the outbound connection — no port to open.
Servor lists what's running
OS, active services, open ports, running containers, expiring certificates. Servor fills the inventory automatically and suggests the most useful monitoring checks.
Terminal, runbooks, alerts
Secure web terminal with session recording. Pre‑written runbooks (nginx upgrade, Postgres hardening, TLS renewal…). Alerts when a check goes red. All in the same console.
The Servor AI takes over
On AI plans: describe what you want in plain language. The AI proposes a structured plan (steps, backup, verification). You approve, it executes and verifies. On Auto: it acts on its own for routine operations.
You stay in control at every step. No magic, no black box.
004 · Official runbooks
Recipes signed by the team, tested in production, bundling snapshot, verify and rollback. Fork them, tweak the variables, build your own.
nginx · zero‑downtime upgrade
/presets/nginx-upgradeBackup config, apt upgrade, graceful reload, verify 200 OK ×3.
postgres · hardening + pg_stat_statements
/presets/postgres-hardeningTune kernel, restrict pg_hba, enable diagnostic extensions.
fail2ban · setup ssh + http
/presets/fail2ban-setupInstall, default jails, 60s ban test, safe sshd restart.
docker · cleanup safe
/presets/docker-prunePrune orphan images, volumes, networks. Keep running ones.
letsencrypt · renouvellement certs
/presets/letsencrypt-renewcertbot renew dry‑run, renew, reload nginx, verify expiry > 60d.
nginx · zero‑downtime upgrade
/presets/nginx-upgradeBackup config, apt upgrade, graceful reload, verify 200 OK ×3.
postgres · hardening + pg_stat_statements
/presets/postgres-hardeningTune kernel, restrict pg_hba, enable diagnostic extensions.
fail2ban · setup ssh + http
/presets/fail2ban-setupInstall, default jails, 60s ban test, safe sshd restart.
docker · cleanup safe
/presets/docker-prunePrune orphan images, volumes, networks. Keep running ones.
letsencrypt · renouvellement certs
/presets/letsencrypt-renewcertbot renew dry‑run, renew, reload nginx, verify expiry > 60d.
k8s · rolling restart deployment
/presets/k8s-rolling-restartrollout restart, wait ready, verify endpoints, rollback on fail.
iptables · base policy
/presets/iptables-baseDefault drop inbound, allow 22/80/443, persist iptables.
apt · unattended-upgrades
/presets/unattended-upgradesInstall, security-only config, reboot window 03:00 Sunday.
sysctl · tuning serveur web
/presets/sysctl-tuningsomaxconn, tcp_tw_reuse, file-max. Backup + sysctl -p.
k8s · rolling restart deployment
/presets/k8s-rolling-restartrollout restart, wait ready, verify endpoints, rollback on fail.
iptables · base policy
/presets/iptables-baseDefault drop inbound, allow 22/80/443, persist iptables.
apt · unattended-upgrades
/presets/unattended-upgradesInstall, security-only config, reboot window 03:00 Sunday.
sysctl · tuning serveur web
/presets/sysctl-tuningsomaxconn, tcp_tw_reuse, file-max. Backup + sysctl -p.
005 · Integrations
Four ways in, ten distros supported, four native notification channels, and the Servor AI included on the AI plan.
Servor.
Control plane
All links up
Connection
01Pick the method that fits your infra, Servor adapts.
Universal Linux
02Discovery tested on the major distros. Push agent for machines behind VPN or NAT.
Notifications
03Four channels out‑of‑the‑box, plus anything that speaks webhook (PagerDuty, OpsGenie, n8n…).
The Servor AI
04An AI we calibrated for infra operations. No OpenAI key to manage, no prompt engineering. You write in plain language, it works.
And reachable via
Web dashboardPublic API v1Scoped API tokensOutbound webhooksNotifications006 · Security
Servor operates on your servers but cannot read your credentials. Keys live in your browser, the database only stores encrypted blobs.
Your secrets are encrypted in your browser before leaving the machine. Servor only ever receives unreadable blobs.
Standard BIP39. Forget your passphrase, recover your access. No back door — you stay the sole owner.
Passphrase change, removing a member, cancelling a subscription — every critical action requires re‑verification.
What an attacker sees
Our database leaks. Here's what comes out:
vault_items.payload · web-01.eu
Impossible to decrypt · key absent from the server
The encryption pipeline
No plaintext key ever leaves your browser. Never.
007 · Pricing
No surprise tiers, no "contact us for pricing". You know what you pay each month, and you scale up when you're ready.
01Free
€0
/mo excl. tax
To connect 2 servers and operate on them, for free.
02Operations
Most popular€9
/mo excl. tax
+ €9 / seat · /mo excl. tax
The operations plan for teams running real traffic.
03AI
€29
/mo excl. tax
+ €19 / seat · /mo excl. tax
Everything in Operations + the Servor AI copilot.
Need more AI requests mid-month? You can buy more à la carte right from your dashboard, without changing plan. Enterprise plan on request for unlimited seats, SSO and SLA.
008 · FAQ
Straight answers on encryption, execution, billing — and what happens when things go wrong.
Your SSH credentials, API keys and secrets are encrypted in your browser with a key derived from your passphrase via Argon2id (64MB RAM, 3 iterations). Servor only ever receives encrypted blobs. Without your passphrase or your BIP39 recovery phrase, nobody — not even us — can decrypt.
Ask = read-only, the AI answers questions. Plan = the AI proposes an action plan (steps, snapshots, checks) that you approve before execution. Auto = autonomous execution with automatic snapshots and rollback on error, except destructive operations which still require manual confirmation.
Servor isn't a provisioning tool, it's an operational agent. Where Ansible/Terraform describe a desired state, Servor diagnoses, proposes, executes and verifies one-off interventions: security update, incident response, audit, scripted exec. You can use both.
No. The whole infrastructure (API, database, Redis, MinIO) is hosted on Railway in the EU region. Your AI calls may transit to Anthropic / OpenAI / Mistral depending on the provider you choose — you have the BYOK option to use your own API keys.
Every sensitive action (create, modify, execute, vault access) is recorded in audit_log with a SHA-256 hash chained to the previous entry. An append-only Postgres trigger prevents any UPDATE/DELETE. You can export to CSV at any time, and the chain is mathematically verifiable.
Yes — an agent installed on the target machine initiates the outbound connection (WSS) to Servor itself. No inbound port to open, works over NAT/VPN with no client-side network config. This is the default mode of operation, not an option.
Server plan at €19/seat/month, AI plan at €49/seat/month. No marketing tiers. You add/remove seats whenever you want: immediate addition with proration, removal applied at the end of the current period. AI credit top-ups (€3/1k, €12/5k, €50/25k) carry over with no expiry.
When initializing the vault you receive a 24-word BIP39 recovery phrase — print it, save it in 1Password/Bitwarden, or store it in a physical safe. With this phrase you can reset a new passphrase at any time. Without it or the passphrase, the data is lost — by design.
Free to start. No card. No commitment. Your servers will thank you.