From an empty VPS to a secure web server, by asking
You rent the server, run one line, and tell your AI what it is for. It sets up a sane, updated, secured base the way an experienced sysadmin would, explains each step, and leaves SSH alone until you confirm your key works.
Works with Claude, Claude Code, ChatGPT and Cursor.
How your AI does it
- STEP 1
It looks before it touches
server_facts tells your AI the distribution, package manager, RAM, disk and what already listens. If the server is not actually empty, it stops and asks.
- STEP 2
Updates and basics
Full upgrade, EPEL on Rocky and Alma, and the everyday tools. Package runs happen as background jobs, so a slow mirror does not time out the chat. If the kernel was upgraded it tells you a reboot is due and asks when.
- STEP 3
Swap, time and hostname
A swap file sized to the RAM when there is none, swappiness turned down, chrony for the clock, and the hostname and time zone you give it.
- STEP 4
Firewall and fail2ban
firewalld on Rocky and Alma, ufw on Debian and Ubuntu. SSH is allowed first, on whatever port it really uses, then HTTP and HTTPS if a site will run. fail2ban watches SSH.
- STEP 5
Automatic security updates
dnf-automatic or unattended-upgrades applies security updates on its own from then on.
- STEP 6
SSH, only with you
Switching SSH to keys only is offered only if a key is installed and you confirm you log in with it, as its own step, after sshd -t. Locking you out is the one outcome it is built to avoid.
Works on
- Rocky Linux, AlmaLinux and RHEL (dnf)
- Debian and Ubuntu (apt)
- Any Linux with systemd, x86_64 or ARM64
- Hetzner, DigitalOcean, OVH, Vultr, Linode, AWS, Google Cloud, Azure or your own hardware
- Servers that block inbound ports: the agent only dials out over HTTPS
- Then Magento, WordPress or any other stack, by asking
Tested on real servers
From our own test runs with Claude Code on fresh Rocky Linux 10 servers.
to connect a server: the agent installs as a systemd service and shows up online in the dashboard within seconds
opened for SudoWhizzy: the agent calls out over HTTPS, and no SSH key or password is stored anywhere
Start with this prompt
Paste it into your AI with SudoWhizzy connected. It fetches the matching playbook and explains its plan before changing anything.
Set up a fresh server as a Magento shop · all prompts
Starter and up, since setting up a server means changing it. Free lets your AI look at a server and tell you what it would do. Pricing.
Questions
Which provider should I use?
Any provider that gives you root on a Linux VPS. For a Magento shop pick at least 4 GB of RAM; for WordPress 2 GB is comfortable. Your AI checks the size first and tells you if it is too small.
Does the agent need a public IP or open port?
No. It dials out to sudowhizzy.com over HTTPS, so it works behind NAT and strict firewalls, and you do not open anything for it.
What if a package mirror stalls?
Your AI retries with shorter timeouts or another mirror. It never switches off package signature checks to get past an error; if something cannot be installed safely, it stops and tells you.
Can I see exactly what it ran?
Yes. Every command, file write and result is in your activity log with its risk level, and /etc is saved before changes so you can roll back.
Safety on every task: destructive actions wait for your approval, /etc is saved before changes, and every action is logged. How it works.
More your AI can do
Your Magento server, run by your AI
WordPress and WooCommerceA fast, secure WordPress server, run by your AI
HardeningHarden your Linux server without locking yourself out
Hacked siteHacked shop or site? Find it, clean it, close the door
MigrationMove your site to a new server with minutes of downtime
Connect your first server
Start free with one server in read-only mode. Upgrade when you want your AI to fix things.
Get started