deflect-one

KO | EN

gitlite — search

#typescript #ai-agents #ai #dsh-plugin #deepseek-harness #open-source #claude-code #codex #cli #developer-tools #react #windows

★ 39 Open GitHub ↗

Deflect One. Agentless DevOps command center for Linux infrastructure - monitoring, attack defense, AI assistance (optional). One Python file, SSH only.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Deflect One

**v0.78 - AuthSentinel: Multi-Protocol Authentication Intelligence + Enhanced ServerCard UX + First-Run Onboarding**

**Agentless DevOps command center for your entire Linux infrastructure - from one terminal.
No agents. No cloud. No SaaS. Just SSH access - and Deflect One turns that into a complete operations platform: server monitoring, active attack detection, file management, deployments, and more. AI support is available as an optional add-on.**

No agents to install on servers. No cloud. No SaaS. Just SSH access - and Deflect One turns that into a complete operations platform.

From server health monitoring to active attack detection, from deployment orchestration to natural-language command execution via built-in AI - Deflect One combines DevOps observability, cybersecurity response, and LLM-powered decision support into a single, self-contained Python file.

> **Beta** - actively developed.

---

## Main Dashboard

![Main Dashboard](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-main.png)

---

## Features

### Real-Time Infrastructure Monitoring
CPU, RAM, disk, network I/O, Docker containers, MySQL/PostgreSQL/Redis - across unlimited servers simultaneously. Async-native coroutine pool, near-zero overhead.

![Cross-Host Process Monitor](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-cross-host-process-monitor.png)
![DB Monitor](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-db-monitor.png)
![Connections Viewer](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-connections-viewer.png)

---

### Active Attack Detection & Defense
Live attack radar: malicious IPs, geo-location, timeline. Manages UFW/iptables rules. Defense mode executes bans, restarts, and rate limits autonomously within your policy.

![Firewall Manager](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-host-firewall-manager.png)
![Firewall Manager - Rules](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-host-firewall-manager2.png)
![Ban IP](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-ban-ip.png)

---

### AuthSentinel - Multi-Protocol Authentication Intelligence
**Unified surveillance across SSH, sudo, databases, mail, FTP, and web panels.** Live auth event stream with anomaly detection (brute force, credential stuffing, impossible travel, privilege escalation chains). Session activity forensics: SSH command history, live SQL queries, SMTP envelope inspection. Per-host auth health scoring. sshd hardening auditor with auto-fix. One-click P1 containment workflow: block IP → kill session → disable account → rotate credentials.

![AuthSentinel - Live Event Feed](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-auth-sentinel-events-list.png)
![AuthSentinel - Fleet Statistics](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-auth-sentinel-stats.png)
![AuthSentinel - Activity Heatmap](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-auth-sentinel-heatmap.png)

---

### Enhanced Server Cards
Health score badges (0-100 with color gradient). Inline Docker container list with status navigation. Hostname pinned to card title. CPU/RAM trend arrows. Keyboard shortcuts and card reordering.

---

### First-Run Onboarding & Host Management
Welcome screen on cold launch: demo mode, add host, or import from `~/.ssh/config`. SSH config sync with credential write-back (backup included). Restore deleted hosts from 7-day archive.

### User & Group Administration
Full Linux user and group management over SSH — create, edit, lock accounts, manage SSH keys, view active sessions and audit details. Safety guards prevent accidental self-lockout.

![User & Group Administration](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-users-groups-administration.png)
![User Details](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-admin-user-details.png)
![User Edit](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-admin-user-edit.png)

---

### Package & System Management
Full apt integration: view available updates, security patches, and install packages - across all hosts from one screen.

![APT Update Manager](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-apt-upd-manager.png)
![APT Package Installer](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-apt-package-installer.png)

---

### Docker & Services
Manage containers, images, and systemd services without leaving the terminal.

![Docker Manager](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-docker-mgr.png)
![Services Manager](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-services-manager.png)

---

### File Manager
Dual-panel SFTP/SSH file manager - browse, upload, download, edit, copy files between hosts. Midnight Commander style.

![File Manager](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-file-manager.png)

---

### Log Aggregation & Journal Viewer
Cross-host regex log search and live journalctl tailing with 8 preset tabs.

![Cross-Host Log Filtering](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-cross-hosts-logs-filtering.png)
![Journal Viewer](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-host-journal-viewer.png)

---

### Email Monitor
MTA queue monitoring, account overview, error rates - across all hosts.

![Email Monitor](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-email-monitor.png)
![Email Queue Manager](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-email-maanger-queue.png)

---

### Fleet & Bulk Operations
Manage your entire server fleet: bulk DevOps commands, SSH key rotation, host management.

![Host Fleet Manager](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-host-fleet-mgr.png)
![Bulk Commands - Select](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-bulk-devops-commands-select.png)
![Bulk Commands - Result](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-bulk-devops-commands-result.png)
![Batch Rotate Keys](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-batch-rotate-keys.png)

---

### 🔧 More Tools
Cron & systemd timer management, network reconnaissance, script runner, config export.

![Cron Manager](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-cron-mgr.png)
![Network Recon](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-hosts-network-recon.png)
![Script Runner](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-scripts-runner.png)
![Tools](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-tools.png)
![Config Export](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-config-export.png)

---

### AI-Enhanced Autonomous Operations (experimental, optional)
Unified AI engine: Claude, GPT-4, Gemini, Mistral, Groq, LM Studio. Per-host LLM instructions enable background governance loops - *"restart /home/bot1/BotService if /home/bot1/tests.log file is older than one day"* - running 24/7 without you watching.

![AI-Driven Operations](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-ai-driven2.png)
![AI SSH Session](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-ssh-ai-driven.png)
![AI SSH Sample](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-ssh-ai-sample.png)
![Host AI Settings](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-host-ai-settigns.png)
![AI Settings](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-settings-ai.png)
![AI Stats](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/screenshot-deflect-ai-stats.png)

---

### 💬 Natural-Language Command Terminal
`Ctrl+A` → describe what you want in plain English → Deflect One translates to CLI/SSH/Bash and executes it.

---

### Some fun
But why not?

![Deflect key](https://raw.githubusercontent.com/Frytskyy/deflect-one/main/deflect-key.jpg)

---

## Installation

```bash
# Install via pip
pip install deflect-one
deflect --demo    # demo mode, no SSH required
deflect           # real mode
```

```bash
# Or run directly without installing
pip install textual paramiko cryptography
python deflect.py --demo
```

**Configure AI:** `F6` → 🤖 AI tab → choose provider → enter API key → Test Connection

---

## Keyboard Shortcuts

### Function Keys

| Key | Screen | Notes |
|-----|--------|-------|
| `F1` | Help | All shortcuts, version, donate link |
| `F2` | SSH Shell | Interactive paramiko shell · `F8` AI Hints · `F9` AI Command |
| `F3` | Log Tail | Live journalctl/tail - 8 tabs: Journal · Auth · Nginx · Apache · Email · Fail2ban · UFW · Syslog |
| `F4` | Disk Usage | Mount points with bar graphs + ETA to full, top-10 dirs |
| `F5` | Port Forwards | SSH tunnel editor, live toggle per host ⚠️ |
| `F6` | Settings | General · Notifications · Security · 🤖 AI (provider, models, defense mode) ⚠️ |
| `F8` | APT Upgrades | Upgradable packages per host, OS/kernel info |
| `F9` | Fleet Manager | All hosts, checkboxes, bulk ops, SSH key rotation, 🤖 AI Audit All |

> ⚠️ Windows Terminal intercepts `F5` and `F6` - disable its system shortcuts to use them.

### Infrastructure

| Keys | Screen | Notes |
|------|--------|-------|
| `Ctrl+B` | Network Connections | `ss -tnp`, state filters, anomaly summary |
| `Ctrl+D` | Docker | Containers, images, resource usage · rename · add as host |
| `Ctrl+E` | Env / Config Audit | `.env` diff between hosts, SSH authorized_keys audit |
| `Ctrl+F` | File Manager | Dual-panel Local + SFTP (Midnight Commander style) - see below |
| `Ctrl+G` | Git / Deployments | Repos status (behind/ahead/dirty), pull, restart service |
| `Ctrl+L` | Log Aggregation | Cross-host regex grep, 5 presets, live results |
| `Ctrl+M` | Email Monitor | MTA queue depth, bounce rate, postfix/dovecot/exim errors |
| `Ctrl+P` | Process Monitor | Cross-host top, kill PID, OOM events |
| `Ctrl+R` | Network Recon | nmap/dig/whois/traceroute/curl via SSH, 11 presets |
| `Ctrl+S` | Script Runner | Library, inline editor, SSH/SFTP deploy, cron scheduling · 🤖 AI Generate |
| `Ctrl+T` | Cron & Timers | crontab + systemd timers, CRUD, bulk add |
| `Ctrl+U` | Backup Monitor | restic · borg · rclone · rsnapshot - last run, status |
| `Ctrl+W` | Firewall | UFW/iptables rules, add/delete, toggle UFW · 🤖 AI Audit → hardening wizard |
| `Ctrl+Y` | Databases | PostgreSQL · MySQL · Redis · MongoDB - connections, QPS, cache hit% |
| `Ctrl+N` | Add Host | New SSH host, per-host 🤖 AI instructions |
| `Ctrl+O` | Edit Host | Security config, all settings, 🤖 AI instructions for focused host |

### Security & AI

| Keys | Screen | Notes |
|------|--------|-------|
| `Ctrl+A` | 🤖 AI Chat | Streaming conversation with full host context, command proposals |
| `Ctrl+H` | Auth Sentinel | Multi-protocol auth intelligence - SSH/sudo/DB/mail/FTP · **[v0.78]** |
| `Ctrl+I` | 🤖 AI Stats | Token usage by tier/day, provider info, 7-day breakdown |
| `Ctrl+J` | User & Group Admin | Linux users, groups, SSH keys, active sessions, user details · **[v0.78]** |
| `Ctrl+K` | Secrets Vault | View/edit encrypted secrets, export/import config with master password |

### Auth Sentinel (`Ctrl+H`) - tabs & keys

| Tab | Content |
|-----|---------|
| Tab 1 | Live auth event feed · Active sessions · Threat summary |
| Tab 2 | Fleet auth stats · Protocol breakdown · 24h×7d heatmap |
| Tab 3 | sshd_config hardening auditor (CIS L1, auto-fix) |
| Tab 4 | Mail abuse monitor (queue flood, bounce spike) |

`v` SessionActivityInspector · `c` Containment workflow · `t` Incident timeline · `b` ban IP · `a` 🤖 AI Intel · `l` raw logs · `s`/`f` filter · `h` cycle hosts · `r` back to Attack Radar

### File Manager (`Ctrl+F`) - keys

`Tab` switch panel · `Ctrl+U` swap panels · `Alt+C` quick CD · `Ins`/`Space` toggle select · `^A` select all · `\` deselect all  
`F2` rename · `F3` view · `F4` edit · `F5` copy · `F6` move · `F7` mkdir · `F8` delete  
`s` create/edit symlink · `Ctrl+Z` attributes (chmod/chown/touch) · `^1`/`^2`/`^3` sort by name/size/date  
`Ctrl+D` favourite locations · Transfer queue: `P` pause/resume · `C` cancel · `Del` clear done

### Server Card shortcuts (when a card is focused) - [v0.78]

`p` Process monitor · `d` Docker container navigation (↑↓ select · `Enter` open · `Esc` exit)  
`o` edit host · `a` toggle AI-controlled · `m` toggle maintenance · `F2` SSH shell · `f` File Manager  
Single-click focus · Double-click open Docker/Process · `Ctrl+←/→/↑/↓` reposition card in grid

---

## Compatibility

**Runs on (your machine):**  
Linux · macOS (Intel + Apple Silicon) · Windows (Windows Terminal and Cmd) · WSL2  
*Any OS that runs Python 3.10+*

**Manages (remote servers):**  
Debian · Ubuntu - primary targets, fully tested  
Fedora · CentOS · Arch · Alpine - works via SSH, not all features tested yet

---

## Tech Stack

- **Python 3.10+** · **Textual 8.x** (TUI) · **asyncio** · **paramiko** (SSH)
- **cryptography** - Fernet + PBKDF2 for HardwareVault
- **AI backends:** `anthropic` · `openai` · `google-generativeai` · `mistralai` *(all optional, experimental)*

---

## License

MIT License with Attribution Requirement.  
Free for personal and commercial use. Attribution to [vladonai.com/deflect](https://vladonai.com/deflect-one) required.

---

*Created by [Volodymyr Frytskyy (WhitemanV)](https://vladonai.com/deflect)*

deflect-one

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README