Secrover Hosting Live In 5 Minutes

Secrover hosting turns your repositories and domains into a security report site that updates itself. xCloud runs the pinned Secrover 0.12.3 scanner with an nginx server that publishes the generated HTML reports over HTTPS behind a login, generates the report password, keeps the reports and cloned repositories on persistent volumes, and rescans every day at 00:00 UTC by default.

Deploy your Secrover

No terminal
No technical skills needed
No lock-in, cancel anytime

What is Secrover?

Secrover is a free and open-source tool that generates clear security audit reports for your dependencies, your code and your domains, without paywalls or a proprietary SaaS. Reports are written to be readable even for non-technical audiences.

Secrover has no web interface of its own: it writes static HTML reports. On xCloud an nginx server publishes those reports over managed HTTPS behind a Basic Auth login, and the scanner reruns on a schedule so the reports stay current.

From Sign-Up to a Live Report Site In Just 3 Easy Steps

A scheduled audit setup normally means a scanner container, a cron schedule, a web server for the reports, a login, volumes, a domain and a certificate. This is the same result without assembling any of it.

Step 01
Sign Up
Create your xCloud account and pick Secrover from the OneClick catalog. Choose your domain, then enter a project name, the repositories to scan (comma-separated https URLs, optional #branch), the default branch and, optionally, domains to audit.
Step 02
We Deploy It For You
One click. We bring up the official Secrover scanner image, pinned by immutable digest, and an nginx container that serves the generated reports behind Basic Auth. The secrover_output and secrover_repos volumes are mounted, a 24-character report password is generated, and the report site is published over HTTPS on your domain.
Step 03
Read The Reports
Save the report password shown in the installation credentials, open your HTTPS report URL and sign in as admin. The first scan starts at once and can take several minutes; until it finishes the page shows a short notice, then the dependency, code and domain reports appear.

Everything Secrover Does, On Your Own Server

Secrover runs in full here: scheduled audits of your repositories and domains, published as readable reports that only people with the password can open.

Dependency Vulnerability Checks
Dependencies are checked for known vulnerabilities across all the languages osv-scanner supports.
Static Code Checks
Source code is scanned with opengrep, which covers the languages opengrep supports.
Optional Domain Audit
List domains you own to check the SSL certificate, HTTP to HTTPS redirect, HSTS header, TLS versions, open ports, security headers and hosting location.
Reports Anyone Can Follow
Reports are plain HTML pages, written to be clear for non-technical readers as well as developers.
Scheduled Rescans
Scans run at every start and then on a schedule, daily at 00:00 UTC by default, set with CRON_SCHEDULE in the environment.
Private Repositories
Add a GITHUB_TOKEN line to the environment to let Secrover clone private repositories over https.

Everything You Need To Run Your Security Reports 24/7

Managed hosting for Secrover, so the parts that keep it online are not your problem.

Secrover 0.12.3 deployed instantly
Official image pinned by digest
Report password generated for you
Reports behind Basic Auth
Free SSL certificate
Server backups and snapshots
Server security updates included
30+ server locations
Unused balance refunded

What You Can Do With Secrover

Keep an eye on known vulnerabilities
Rescan the dependencies of your repositories every day and read what changed in a report, instead of remembering to run a scanner by hand.
Share security status with non-developers
Give managers, clients or auditors a protected link to plain HTML reports they can follow without reading scanner output.
Check the public face of your domains
Audit SSL certificates, redirects, HSTS, TLS versions, open ports and security headers for the domains you own, on the same schedule as your code.
Cover several projects in one place
List multiple repositories, each with its own optional branch, and read all of them from one report site.

Secrover Screenshots

Secrover report overview page served from an xCloud install

Secrover code audit report listing static analysis findings

Secrover vs Alternatives

Snyk: A commercial hosted service for dependency and code scanning. Secrover is free, open-source (GPL-3.0) and runs on a server you control.
osv-scanner: The command-line scanner behind Secrover's dependency audit. Secrover adds code and domain audits, a schedule and a readable HTML report site around it.
opengrep: The static analysis engine behind Secrover's code audit. Secrover runs it alongside the dependency and domain audits and publishes the results as reports.

Simple Pricing. Everything Included.

Dedicated Cloud VPS sizes, pre-configured for Secrover hosting. Pick the one that fits, and resize any time.

Cloud VPS 6 GB

Cloud VPS 16 GB

More headroom if Secrover sits alongside other security and monitoring tools.

$59.99per month

16 GB RAM
6 vCPU cores
200 GB NVMe SSD
30 TB
Unlimited

Get started

Every size is a dedicated Cloud VPS we provision, patch, monitor and restore. Billed monthly with no lock-in — delete the server and the unused balance comes back to your account. Secrover itself is licensed by Secrover's maintainers under GPL-3.0.

Docker hosting

Already Have a Server? Bring Your Own

Connect any VPS — DigitalOcean, Vultr, Linode, AWS, Hetzner or bare metal — and deploy Secrover on it through the same panel, for a per-server management fee instead of a Cloud VPS rental.

Free

Start your journey without cost.

$0forever

1 server
10 sites

Start free

Starter

Professional

The same platform, discounted at 6–10 servers.

$4per server / month

6–10 servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Agency

The same platform, discounted at 11+ servers.

$3per server / month

11+ servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Priced per connected server, so your rate adjusts automatically as you add or remove servers. You pay your own provider for the server itself.

Self-managed hosting

Ready To Run Your Own Security Audits?

Secrover on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore. Deploy faster. Own the server. Stay in control.

Fast Provisioning
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Enterprise-grade security
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
Intuitive Control Panel
From Server creation to application deployment, everything can be managed from our intuitive control panel.

Hear what people are saying about us

See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.

xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!

Brian Geovanny

I've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.

Kevin Pineda

I'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting

Leo Koo

How Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud

Ed Ellingham

xCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.

Dumitru Butucel

xCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.

Waqar Ahmed

Trust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍

Rahul Singh

So far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.

Massimo Villa

Came from cloudways then to runcloud then to xcloud. Looks like I'm staying here.

Gerson El

I've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.

Tony Lewis

I came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.

Jared McDowell

I like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose

David McCan

How Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently

Kevin Heinrichs

I had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.

Dan Spinoza

Dear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.

Rahil Maknojia

Came from runcloud. Tried xcloud and never came back.

Karl Fanega

How Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites

Gary Moody

xCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.

Jorge de los Reyes Martínez

I use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.

Jay Pagano

How Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud

Lori Newman

I too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps

John Aperture

I went from Cloudways to xCloud. No intention on switching in the foreseeable future.

Blaine Moore

Frequently Asked Questions

Feel free to contact us with any questions or concerns you may have.

What does Secrover check?

Dependencies for known vulnerabilities, source code for static issues, and optionally the SSL certificate, HTTP to HTTPS redirect, HSTS header, TLS versions, open ports, security headers and hosting location of your domains. This template deploys version 0.12.3.

How do I sign in?

Secrover has no web interface of its own. The report site uses Basic Auth with the user admin and the generated password shown in the installation credentials.

What runs alongside Secrover?

A scanner container with no published ports, and an nginx container that serves the generated reports. The report server is the only public service, through xCloud-managed HTTPS.

How often does it scan?

Scans run at every start and then on a schedule, daily at 00:00 UTC by default. Keep CRON_SCHEDULE set in the environment: without a schedule the container scans once and exits.

How do I change the repositories or domains?

Scan targets are read at every start. Edit the environment values, use Save & Redeploy, and a new scan starts.

Edit environment variables and redeploy

Can it scan private repositories?

Yes. Add a GITHUB_TOKEN line to the environment after install. The token is written into the cloned repositories' git configuration on the secrover_repos volume and is sent to every https host in your repository list, so use a read-only token and only repositories you trust.

Can I audit any domain?

Only audit domains you own or are allowed to test. The domain audit connects to the domains you list and probes about 20 common ports on each.

How do I change the report password?

Change REPORTS_PASSWORD in the environment, using letters and digits only, and Save & Redeploy.

What should I back up?

The secrover_output volume (generated reports and scan log) and your environment values. The secrover_repos volume holds clones that are re-created on the next scan.

Backups in xCloud

What survives a restart?

The reports and cloned repositories are kept on persistent volumes, and the login still works. This was checked in QA after an xCloud Restart.

Does xCloud automatically back up or update Secrover?

No. The template pins Secrover 0.12.3 by immutable digest; new installations use the pinned release and existing sites are not automatically upgraded. Back up first, read the upstream release notes, then bump the readable tag and digest together on your own schedule. Server-level backups and snapshots are available on every Cloud VPS.

What are the server requirements, and why does this page sell 6 GB?

The template's baseline asks for 1 CPU core, 512 MB of RAM and 5 GB of disk; measured idle use in QA was about 15 MiB. This page sells the 6 GB tier as the entry rung, with real headroom for scans of larger repositories.

Is xCloud officially partnered with Secrover?

No. No official partnership or endorsement between xCloud and the Secrover project has been verified. This is a deployment and server-management option for the open-source Secrover project.

Can I cancel anytime?

Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.