InfraGuard

Security check: Password aging

Whether a max password age is set.

InfoAccounts / Privilege

What it checks

Whether a max password age is set.

Why it matters

Non-expiring passwords are abusable long-term once leaked.

How to fix

Apply aging via login.defs / chage.

InfraGuard runs all 36 checks across your servers at once and grades each host A–F.

Track these versions on your own servers

InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.

Weekly exploited-vulnerability digest

The KEV additions that matter for self-hosted servers, once a week. No other mail.