Why Staunch
Staunch is the tool I wished I had: install one agent, and know what’s dangerous on your server and exactly how to fix it. Here’s why I’m building it, and how.
The problem I keep running into
Every day at work, I deal with servers. And there have never been so many of them. With AI tools, shipping an app and putting it online takes an afternoon, even for people who have never run a server before. That’s a good thing. But security doesn’t come with it, and I keep seeing the same result: servers that go live in minutes, then never get checked again.
Nobody does it on purpose.
- You ship the project.
- You add a container, then another one.
- You open a port to test something.
- Security updates pile up because there’s always something more urgent.
- Six months later, nobody really knows what’s exposed anymore.
The tools that could catch this are either built for big companies with a security team, or they give you a wall of alerts and leave you to figure out what matters. Most developers I know don’t have time for either.
Why I’m building Staunch
I wanted something simple: install one agent, and get a clear answer to two questions.
What’s dangerous on my server right now?
And what exactly do I do about it?
A short list, ranked by real risk.
Not a hundred alerts. The few things that actually matter, most dangerous first.
What to do, step by step.
For every issue, why it matters and exactly how to fix it. No hours lost digging through forums for fixes that don’t work.
How I’m building it
A few rules I won’t break.
The agent is read-only.
It never changes anything on your server.
Nothing to open.
The agent only connects out. No new port, nothing listening.
Your data stays in Europe.
Stored and processed in the European Union.
No made-up problems.
Detection comes from strict, verifiable rules. The AI explains and prioritizes. It doesn’t guess.
Everything is documented.
You’ll know exactly what the agent collects and why.
Where things stand
Staunch isn’t ready yet. I’m building it on nights and weekends, alongside my job, and early access opens in 2027. I’d rather take the time to get it right than ship something I wouldn’t trust on my own servers.
If you join the waitlist, you’ll get in first, and I’ll probably ask for your feedback along the way. That’s the part I’m most looking forward to.
Say hello
If you run your own servers, I’d love to hear how you handle security and monitoring today, and what annoys you about it. Every email lands in my inbox, and I read all of them.
mael@staunch.sh