A Security Nightmare Disguised as a Server Monitor — Avoid!
1. Abysmal Cross-Device UI
First, the application is barely functional on anything other than a phone. The iPad and Mac versions feel like completely unoptimized, cheap web-wrappers. It is so glitchy that you cannot even access the settings screen to purchase the Pro version unless you specifically open the app on an iPhone.
2. Sketchy Domains & ISP Blocks
To make the app work, you have to pipe an installation script into your server. The developer hosts this script on a free .us.kg domain registry. This is such a massive red flag that my ISP's network security shield actively intercepted and blocked the download because that specific domain extension is notorious for distributing malware and botnets.
3. Unwarranted, God-Tier Access
If you manage to bypass your ISP to read the Docker installation script, the code inside is terrifying. The script demands the --privileged flag, --network host mode, and direct root volume mounts to your host's /proc and /var/run/docker.sock. It is asking for complete, unfiltered administrative access to your bare-metal hardware and hypervisor, completely defeating the purpose of container isolation.
4. Sloppy Security Hardcoding
To top it all off, reading the script reveals incredibly sloppy development fallbacks. If your system happens to be missing openssl to generate a secure random password, the script doesn't warn you—it just quietly assigns the exact same hardcoded, plaintext secret key to your server as a fallback. This is a serious security issue and indicates the developer of this app doesn’t care at all about your server’s security or privacy.
It is absolutely not worth the $7, $13 or whatever they choose to make the Lifetime deal today. You cannot safely sandbox this agent without breaking all the "Pro" management features it sells you. Keep your network secure and just deploy standard open-source tools like Portainer or Uptime Kuma instead. -PKG
Response from developer
Thanks for taking the time to write such a detailed review and for actually looking at the install script and behavior instead of just reacting to the marketing. A few of the points you raised were fair, especially around the large-screen UI, the trust signal of the old install domain, and the security optics of the Docker install path. We’ve already made changes based on that feedback: the iPad/Mac build now has a proper Settings/upgrade entry, the public install entry has been moved to a new domain, the installer no longer falls back to a fixed plaintext secret, and the Docker install flow now separates a lower-permission mode from a full-management mode so users can choose based on their own risk tolerance. On the permissions point specifically: some of the monitoring and container-management features do require deeper host access than a normal app container would, and that is exactly why we now make that an explicit choice instead of treating it as an invisible default. That said, if your priority is strict isolation over deeper host-level management, then your criticism is understandable, and tools like Portainer or Uptime Kuma may indeed be a better fit for your use case. In any case, the review was useful. You don’t have to change your opinion, but the concerns you raised were taken seriously, and several of them have already been addressed in the product and install flow.
Nice
UI UX 太烂+不思进取
tr、qb多选
Response from developer
感谢反馈，后续支持下
Hard to use in English
Response from developer
We appreciate your feedback; we are actively optimizing the English translation and improving the server onboarding process.
