Crush Every Threat
Before It Crushes You
ThreatCrush starts with a module marketplace: discover, publish, and grow security modules first — while the broader platform, daemon, and operator workflows continue to mature.
The long-term product is an all-in-one security agent for Linux servers, with desktop clients for operators. Right now, the module store is the clearest place to start.
Preferred install path
The installer detects whether this machine is a server or desktop, uses your existing package manager when available, and can bootstrap Node.js with mise on bare machines.
Linux servers get the CLI. Linux desktops get CLI + desktop app. Windows is desktop-client only and connects to a ThreatCrush server elsewhere.
Preferred lifecycle commands
Manual npm / pnpm / yarn / bun installs still work, but curl | sh is the recommended default.
Start with the marketplace now. Broader platform rollout continues after the basic install/docs/housekeeping work.

// CAPABILITIES
Everything You Need to Stay Ahead
Live Attack Detection
Monitors all inbound connections — every port, every protocol. Detects SQLi, XSS, brute force, SSH attacks, port scans, DNS tunneling, and more in real-time.
Code Security Scanner
Scan your codebase for vulnerabilities, hardcoded secrets, and misconfigurations. Find problems before attackers do.
Pentest Engine
Automated penetration testing on your URLs and APIs. Discovers attack vectors and rates their severity.
Network Monitor
Watches all TCP/UDP traffic across every port — HTTP, SSH, DNS, FTP, database connections. See exactly what's hitting your server and flag anomalies.
Real-time Alerts
Email, SMS, Slack, Discord, and webhook notifications the instant a threat is detected. Push alerts to your phone. Never miss an attack.
Active Defense — Strike Back
Don't just detect — retaliate. Tar pits waste attacker resources, honeypots trap and fingerprint them, deception feeds them fake credentials, and auto-reports get their servers shut down. They attack you, you make them regret it.
systemd Daemon
Runs as a background service on your server. Auto-starts on boot, monitors 24/7, zero maintenance.
// START HERE
The Module Store Comes First
After the basic housekeeping work, the first real wedge for ThreatCrush is the marketplace. Discover modules, publish your own, and shape the ecosystem before the rest of the platform fills in.
// SETUP
Three Commands to Full Protection
Install
curl -fsSL https://threatcrush.com/install.sh | shDetects server vs desktop, can bootstrap with mise, then installs the right bundle cleanly
Configure
threatcrush initAuto-detects all services — web, SSH, DNS, databases
Monitor
threatcrush monitorReal-time protection, runs as a daemon
// PREVIEW
See It in Action
Real-time security monitoring across every platform.
⚡ CLI

▣ TUI Dashboard

🖥️ Desktop App

📱 Mobile App

// DOWNLOAD
Available Everywhere
Monitor your servers from anywhere — terminal, desktop, or on the go.
Desktop
macOS · Windows · Linux
Full dashboard with real-time event stream, module management, and threat analytics. E2E encrypted connection to your daemon.
Coming soon
Mobile
iOS · Android
Get instant push alerts when threats are detected. Monitor dashboards, manage modules, and check server status from anywhere.
Coming soon
Browser Extension
Chrome · Firefox · Edge
Scan any website from your browser. Get real-time alerts, check security headers, and monitor your servers without leaving the tab.
Coming soon
🔒All apps connect via end-to-end encryption — your vulnerability data never touches our servers unencrypted.
// PRICING
One Price. Forever.
Full platform: CLI, daemon, scanner, pentest engine, API. Pay once.
AI-enhanced modules billed on usage — pay only for what you use
🎁 Refer a friend → they save $100, you earn $100
- ✓Live attack detection & blocking
- ✓Code vulnerability scanner
- ✓Automated pentest engine
- ✓Network monitor — all ports, all protocols
- ✓Real-time email + SMS alerts
- ✓Webhook support for custom integrations
- ✓Active defense — tar pits, honeypots, deception
- ✓systemd daemon — runs 24/7
- ✓Full CLI, desktop & mobile apps
- ✓All core modules + future updates
- ✓Priority support
Enterprise
Custom modules, SLA, dedicated support, on-prem hardware appliances, volume licensing.
📅 Schedule a CallGovernment & Defense
FedRAMP-ready, air-gapped deployment, FIPS 140-2, ITAR compliant, GSA Schedule compatible.
📅 Schedule a Call// REFER & SAVE
Bring a Friend. Both Save $250.
Share your referral link after signing up. When your friend joins, your friend gets lifetime access for $399 and you earn $100 in crypto per referral via CoinPayPortal. Refer 5 friends = free license.
1. Sign Up
Join the waitlist and get your unique referral link.
2. Share
Send your link to a friend who needs server security.
3. Both Save
They pay $399, you earn $100 in crypto (BTC/ETH/USDT/SOL). No limits.
// FAQ
Questions? Answers.
Ready to Crush Threats?
Join the waitlist now. Your server deserves real-time protection. Limited lifetime spots at $499 — price increases after launch.