Deflect One - AI-Powered DevOps Command Center
🛰
Deflect One is a self-contained, agentless DevOps command center that puts real-time control over your entire Linux infrastructure in one place. No agents to install on servers. No cloud. No SaaS. Just you, your SSH keys, and SSH access - and Deflect One makes it a complete operations platform.
From server health monitoring to active attack detection, from deployment orchestration to natural-language command execution via built-in AI - Deflect One is the result when you combine DevOps observability, cybersecurity response, and LLM-powered decision support into a single, cohesive tool.
What Deflect One Does
📈 Real-Time Infrastructure Monitoring - CPU, RAM, disk, network I/O, Docker containers, MySQL/PostgreSQL/Redis slow queries, and more - across unlimited servers simultaneously. Async-native coroutine pool delivers near-zero overhead.
🛡 Active Attack Detection & Defense - live attack radar shows malicious IPs, geo-location, and timeline. Automatically manages UFW/iptables rules. Defense mode executes mitigations - bans, restarts, rate limits - autonomously within operator-set policy limits.
🤖 AI-Enhanced Autonomous Operations - unified AI engine supports Claude, GPT-4, Gemini, Mistral, Groq, and LM Studio. Per-host LLM instructions enable background governance loops - for example: "restart MySQL if slow-query rate exceeds 10/min". Runs 24/7 without you watching.
💬 Natural-Language Command Terminal - press Ctrl+A and type what you want in plain English. Deflect One translates it to production-ready CLI/SSH/Bash and runs it for you. No guessing command syntax under pressure.
📊 25+ Operational Screens - each dimension of infrastructure covered: log aggregation with regex search, SFTP file manager, backup/restic status, cron & systemd timer management, email monitor, process audit with OOM detection, deployment flow (git pull, restart, rollback), cross-host root-cause analysis, and more.
🔐 Hardware-Bound Encrypted Credential Vault - SSH credentials are encrypted at rest using Fernet + PBKDF2, bound to local machine hardware. A stolen config file is worthless on any other machine.
How It Works
Deflect One is a 10,000+ LOC Python monolith built on Textual TUI and asyncio. It manages your entire server fleet exclusively via paramiko SSH - no daemons, no agents, no ports to open beyond what SSH already requires. The async coroutine pool coordinates real-time data collection, command execution, and event processing across all hosts simultaneously.
The dual-tier AI model strategy (SMART for reasoning, FAST for classification) optimizes cost and latency. Per-host LLM instruction sets, meaning different servers can have different governance policies running in parallel background loops.
Setup is JSON-based, portable, and export/import-capable. The security wizard onboarding walks you through initial setup - from vault creation to host registration - in minutes.
Built for
Deflect One is purpose-built for infrastructure engineers and DevOps professionals who need real-time visibility and autonomous defense without sacrificing control. If you manage Linux servers and want more than htop and grep across 15 terminals, this is what you've been waiting for.
Equally useful for solo developers running a VPS or homelab who want server health alerts, log monitoring, and AI-assisted management without deploying Prometheus, Grafana, ELK, and a dozen other tools just to know what's happening on their machines.
| ⚡ Current Status & Beta Access | |
|
Status: Active development - beta coming soon
Runs on:
Manages: Stack: Python 3.10+, Textual TUI, asyncio, paramiko, Fernet/PBKDF2. Optional AI modules: Claude API, OpenAI/Gemini/Mistral |
AI backends: Claude, GPT-4, Gemini, Mistral, Groq, LM Studio (local) License: MIT License with Attribution Requirement. Freeware - free for personal and commercial use Agent required on servers: None |
♥ Support Deflect One Development🔗 View on GitHub⬇ Download deflect.py
Deflect One is completely free. Your sponsorship goes directly into continued development, new features, and the beta release.