Product · Server security monitoring
LemonSees
A Windows app that watches your Linux servers through a normal SSH login — what runs, who connects, who attacks — and checks them against security standards. Nothing is installed on the servers.
- Status
- Stable · v2.0
- Runs on
- Windows 10/11 → Linux over SSH
- Built with
- Electron · React · TypeScript
- License
- MIT
- Languages
- English, Ukrainian, Polish, Russian, Chinese
What it does
What runs on the server
Live processes, everything set to start on its own, a risk score and a scan for exposed settings — with fixes.
Who it talks to
Live traffic, the busiest connections with their location, and which program opened each one.
Who attacks it
The most active attackers, the usernames they try, and a one-click lookup of any address.
Incidents
A log of incidents with severity, status and timeline, and ready-made responses — including one for password-guessing attacks.
Compliance
Checks against CIS, NIST and ISO standards, reports you can export, and an audit log.
Databases
Browse and query 14 databases — PostgreSQL, MySQL, Redis, MongoDB, SQLite and more — through the same SSH login.
Before you connect a server
Use SSH keys rather than passwords: saved passwords are currently stored in plain text on the local machine. Give the SSH account the least privilege that still lets it read what you want watched.