# defensia-agent

Generated on 10 Mar 2026 from [the defensia-agent catalog page](https://marketplace.digitalocean.com/apps/defensia-agent)

Defensia Agent is a lightweight security daemon that monitors your server in real time, detecting and blocking brute-force SSH attacks, port scans, web application exploits, and suspicious network activity.

![Dashboard](https://defensia.cloud/img/screenshot-01-dashboard.png)

It connects to your Defensia dashboard at defensia.cloud, where you can see live events, manage firewall rules, configure your WAF, and receive instant threat alerts.

Unlike traditional tools that require manual rule maintenance, Defensia uses a scoring engine that correlates multiple signals before taking action minimizing false positives. All monitoring runs locally on your server; the cloud dashboard gives you visibility and control without handling your traffic.

![Security Events](https://defensia.cloud/img/screenshot-02-events.png)

Once installed, the agent runs as a systemd service and applies updates automatically. This 1-Click image launches an interactive setup wizard on first login, just paste your install token from defensia.cloud and your server is protected in under a minute.

![WAF Configuration](https://defensia.cloud/img/screenshot-04-waf.png)

## Software Included

| Package | Version | License |
|---|---|---|
| [defensia-agent](https://github.com/defensia/agent) | 1.0.0 | Proprietary |
| iptables | system | GPLv2 |
| curl | system | MIT/curl |

## Creating an App using the Control Panel

Click the **Deploy to DigitalOcean** button to create a Droplet based on this 1-Click App. If you aren’t logged in, this link will prompt you to log in with your DigitalOcean account.

[![Deploy to DO](https://www.deploytodo.com/do-btn-blue.svg)](https://cloud.digitalocean.com/droplets/new?image=defensia-defensiaagent)

## Creating an App using the API

In addition to creating a Droplet from the defensia-agent 1-Click App using the control panel, you can also use the [DigitalOcean API](https://docs.digitalocean.com/reference/api). As an example, to create a 4GB defensia-agent Droplet in the SFO2 region, you can use the following `curl` command. You need to either save your [API access token](https://docs.digitalocean.com/reference/api/create-personal-access-token/index.html.md) to an environment variable or substitute it in the command below.

```shell
curl -X POST -H 'Content-Type: application/json' \
         -H 'Authorization: Bearer '$TOKEN'' -d \
        '{"name":"choose_a_name","region":"sfo2","size":"s-2vcpu-4gb","image":"defensia-defensiaagent"}' \
        "https://api.digitalocean.com/v2/droplets"
```

## Getting Started After Deploying defensia-agent

## Connect to your Droplet

SSH into your new server:

ssh root@your\_droplet\_public\_ipv4

An interactive setup wizard will launch automatically. You will need a **Defensia install token**:

1. Go to [https://defensia.cloud](https://defensia.cloud) and sign in (or create a free account)
2. Click **Add Server** to generate a token
3. Paste the token when prompted

   The agent will install and connect to your dashboard in under a minute.

## After setup

- **Dashboard:** [https://defensia.cloud](https://defensia.cloud)
- **Agent status:**`systemctl status defensia-agent`
- **Logs:**`journalctl -u defensia-agent -f`
- **Re-run wizard:**`defensia-setup`