What is exposed, what is unclear, and which facts need verification before anyone receives access.
What the report contains
Ordered checks for SSH, firewall, service user, secret storage, listening addresses, restart behavior, and logs.
A provider-ready list of evidence to request, secrets never to send in chat, and acceptance checks to run yourself.
Three beginner questions the check answers
The report distinguishes the VPS service from your local operator device and identifies which component must stay online.
Bot tokens and private keys should never be placed in chat or screenshots. The report checks whether the planned storage boundary is explicit.
The checklist asks for redacted evidence of service status, listening addresses, firewall state, restart behavior, and logs.
Hard boundary
Not ready to buy? Send an anonymous scope check.
Do not include passwords, private keys, personal data, customer data, or production credentials. A public messenger handle and a short redacted setup description are enough.