Security updates
The software on your server gets regular security fixes. When they aren’t installed, known weak spots stay open — and attackers scan the internet for exactly those. Keeping up with updates is one of the simplest ways to stay safe.
- At a glance
- Group
- Security
- Tendbot
- Can fix it
- What it does
- Installs updates one at a time and checks your site still works.
- Approval
- Always with your OK, or your access mode
What you’ll notice
- A message like “12 updates can be applied immediately” when you log in
- Warnings from your host about outdated software
- Security scanners flagging old versions
- Updates that have been waiting for months
Why it usually happens
- Nobody logs in to install them regularly
- Automatic updates were never switched on
- Worry that an update will break the site
- An earlier update failed and blocked the rest
Fix it yourself
How to fix it by hand
Comfortable with a terminal? Here’s what an experienced admin would do. Start with the read-only commands.
- 01
Refresh the list of updates
Downloads the latest information about available updates.
sudo apt update - 02
See what’s waiting
Lists every package with an update available.
apt list --upgradable - 03
Install the updates
Installs available updates. Do it at a quiet time for your site.
sudo apt upgrade - 04
Check whether a reboot is needed
Some updates only take effect after a restart of the whole server.
ls /var/run/reboot-required
With Tendbot
How Tendbot fixes it
- Checks which security updates are waiting and explains what they fix.
- Offers to install them one at a time, checking your site still works after each.
- Takes a backup first and verifies afterwards, like every fix.
- Tells you when a reboot is needed — Tendbot never reboots your server for you.
FAQ
Security updates: common questions
Will installing updates break my website?
Security updates are designed to be safe, and problems are rare. Installing them one at a time and checking the site after each keeps the risk low.
How often should I install security updates?
As soon as practical — ideally every week. Attackers often start using a known weakness within days of it being published.
Private alpha · invites in small waves
Let Tendbot look after your server
Join the alpha with one email address. Early testers help shape Tendbot and keep the founding-member perks after launch.
- No card needed
- Leave any time