v0.78 - AuthSentinel: Multi-Protocol Authentication Intelligence + Enhanced ServerCard UX + First-Run Onboarding

Agentless DevOps command center for your entire Linux infrastructure - from one terminal. No agents. No cloud. No SaaS. Just SSH access - and Deflect One turns that into a complete operations platform: server monitoring, active attack detection, file management, deployments, and more. AI support is available as an optional add-on.

No agents to install on servers. No cloud. No SaaS. Just SSH access - and Deflect One turns that into a complete operations platform.

From server health monitoring to active attack detection, from deployment orchestration to natural-language command execution via built-in AI - Deflect One combines DevOps observability, cybersecurity response, and LLM-powered decision support into a single, self-contained Python file.

Beta - actively developed.

Main Dashboard

Features

Real-Time Infrastructure Monitoring

CPU, RAM, disk, network I/O, Docker containers, MySQL/PostgreSQL/Redis - across unlimited servers simultaneously. Async-native coroutine pool, near-zero overhead.

Active Attack Detection & Defense

Live attack radar: malicious IPs, geo-location, timeline. Manages UFW/iptables rules. Defense mode executes bans, restarts, and rate limits autonomously within your policy.

AuthSentinel - Multi-Protocol Authentication Intelligence

Unified surveillance across SSH, sudo, databases, mail, FTP, and web panels. Live auth event stream with anomaly detection (brute force, credential stuffing, impossible travel, privilege escalation chains). Session activity forensics: SSH command history, live SQL queries, SMTP envelope inspection. Per-host auth health scoring. sshd hardening auditor with auto-fix. One-click P1 containment workflow: block IP → kill session → disable account → rotate credentials.

Enhanced Server Cards

Health score badges (0-100 with color gradient). Inline Docker container list with status navigation. Hostname pinned to card title. CPU/RAM trend arrows. Keyboard shortcuts and card reordering.

First-Run Onboarding & Host Management

Welcome screen on cold launch: demo mode, add host, or import from ~/.ssh/config. SSH config sync with credential write-back (backup included). Restore deleted hosts from 7-day archive.

User & Group Administration

Full Linux user and group management over SSH — create, edit, lock accounts, manage SSH keys, view active sessions and audit details. Safety guards prevent accidental self-lockout.

Package & System Management

Full apt integration: view available updates, security patches, and install packages - across all hosts from one screen.

Docker & Services

Manage containers, images, and systemd services without leaving the terminal.

File Manager

Dual-panel SFTP/SSH file manager - browse, upload, download, edit, copy files between hosts. Midnight Commander style.

Log Aggregation & Journal Viewer

Cross-host regex log search and live journalctl tailing with 8 preset tabs.

Email Monitor

MTA queue monitoring, account overview, error rates - across all hosts.

Fleet & Bulk Operations

Manage your entire server fleet: bulk DevOps commands, SSH key rotation, host management.

🔧 More Tools

Cron & systemd timer management, network reconnaissance, script runner, config export.

AI-Enhanced Autonomous Operations (experimental, optional)

Unified AI engine: Claude, GPT-4, Gemini, Mistral, Groq, LM Studio. Per-host LLM instructions enable background governance loops - "restart /home/bot1/BotService if /home/bot1/tests.log file is older than one day" - running 24/7 without you watching.

💬 Natural-Language Command Terminal

Ctrl+A → describe what you want in plain English → Deflect One translates to CLI/SSH/Bash and executes it.

Some fun

But why not?

Installation

# Install via pip
pip install deflect-one
deflect --demo    # demo mode, no SSH required
deflect           # real mode

# Or run directly without installing
pip install textual paramiko cryptography
python deflect.py --demo

Configure AI: F6 → 🤖 AI tab → choose provider → enter API key → Test Connection

Keyboard Shortcuts

Function Keys

⚠️ Windows Terminal intercepts F5 and F6 - disable its system shortcuts to use them.

Infrastructure

Security & AI

Auth Sentinel (Ctrl+H) - tabs & keys

v SessionActivityInspector · c Containment workflow · t Incident timeline · b ban IP · a 🤖 AI Intel · l raw logs · s/f filter · h cycle hosts · r back to Attack Radar

File Manager (Ctrl+F) - keys

Tab switch panel · Ctrl+U swap panels · Alt+C quick CD · Ins/Space toggle select · ^A select all · \ deselect all
F2 rename · F3 view · F4 edit · F5 copy · F6 move · F7 mkdir · F8 delete
s create/edit symlink · Ctrl+Z attributes (chmod/chown/touch) · ^1/^2/^3 sort by name/size/date
Ctrl+D favourite locations · Transfer queue: P pause/resume · C cancel · Del clear done

Server Card shortcuts (when a card is focused) - [v0.78]

p Process monitor · d Docker container navigation (↑↓ select · Enter open · Esc exit)
o edit host · a toggle AI-controlled · m toggle maintenance · F2 SSH shell · f File Manager
Single-click focus · Double-click open Docker/Process · Ctrl+←/→/↑/↓ reposition card in grid

Compatibility

Runs on (your machine):
Linux · macOS (Intel + Apple Silicon) · Windows (Windows Terminal and Cmd) · WSL2
Any OS that runs Python 3.10+

Manages (remote servers):
Debian · Ubuntu - primary targets, fully tested
Fedora · CentOS · Arch · Alpine - works via SSH, not all features tested yet

Tech Stack

• Python 3.10+ · Textual 8.x (TUI) · asyncio · paramiko (SSH)
• cryptography - Fernet + PBKDF2 for HardwareVault
• AI backends: anthropic · openai · google-generativeai · mistralai (all optional, experimental)

License

MIT License with Attribution Requirement.
Free for personal and commercial use. Attribution to vladonai.com/deflect required.

Created by Volodymyr Frytskyy (WhitemanV)