Read-only security tooling for Linux server maintenance: hardening audit, CVE exposure, rsync migration validation and PHP threat scanning.