The six doctors

Doctor	Platform	What it is
MacDoctor 1.151	macOS (Intel + Apple Silicon)	The full Mac bench: 97+ checks, ~150 modes, one stick
WinDoctor 3.166	Windows 7 → 11, Server 2008 R2 → 2025	One signed .exe: 40 check groups, ~175 modes
LinuxDoctor 1.25	Any systemd distro	Log-autopsy + live diagnosis, native RAID/LVM recovery, carving, retained backups
EmailDoctor 1.12	Any mail domain	Deliverability & DNS-auth auditor that writes the fix
ServerDoctor 1.14	Linux (+ Windows) servers	Attack detection, perf tuning, WordPress security & forensics, bare-metal DR, host hardening

ServerDoctor vs the server stack
The nine categories that didn’t apply in September. One tool replaces the lot.

Host hardening & server performance

Capability	Lynis / CIS-CAT / Ansible	MySQLTuner / host dashboards	ServerDoctor
Audit the box against best practice	✓ (Lynis, CIS-CAT)	~ DB only (MySQLTuner)	✓
Apply the hardening, reversibly	✗ report only	✗ advice only	✓
0–100 server rating + “how many sites it can host”	✗	~ partial	✓
Resource- & co-service-aware tuning (never starve PHP/Redis)	✗	✗ blind to co-residents	✓
Validate + undo on every applied change	n/a	n/a	✓
Turn a server into a hardened router	✗ DIY	✗	✓

Attack detection & brute-force defence

Capability	fail2ban / CSF-LFD	Wordfence / Sucuri (network)	ServerDoctor
Brute-force / flood / scan / C2 detection from the server’s own logs	~ DIY rules	~ per-site	✓
Distributed FTP brute-force (slow, many-IP) caught	✗ single-IP rules miss it	✗	✓ –ftp
Orchestrates fail2ban / blocks the IP for you	~ you configure it	✗	✓
Works on Linux and Windows servers	✗ Linux only	~ app layer	✓

WordPress security, forensics, migration & performance

Capability	Wordfence / Sucuri / MalCare / Patchstack	Duplicator / UpdraftPlus	ServerDoctor
Malware scan across every tenant from the server	~ per-site subscription + plugin	✗	✓
Compromised-site forensic triage	~ paid IR add-on	✗	✓ –wp-attack
Professional HTML/PDF incident report	~ Sucuri/Wordfence paid response	✗	✓
Name the slow plugin by bisecting the active list	✗	✗	✓ –wp-slow
Diagnose “what’s hammering the site right now”	~ partial	✗	✓ –wp-overload
Full site clone + off-site FTP/S3, scheduled	✗	✓ per-site plugin	✓ –snapshot
No plugin, no per-site subscription	✗ paid per site, per year	✗ per-site	✓ server-side

Bare-metal disaster recovery & lockout-safe access

Capability	Clonezilla / ReaR	Acronis / Veeam	ServerDoctor
Whole-server image for disaster recovery	✓ manual / DIY	✓ enterprise-priced	✓ –backup
Bootable restore USB	~ (ReaR)	✓	✓
Restore to dissimilar hardware	~ (ReaR, expert)	✓ paid tier	✓
No per-workload licence	✓ free but DIY	✗ per workload	✓
SSH 2FA (TOTP or FIDO2) with dead-man rollback	✗	✗	✓ –2fa
One-command ISPConfig / Nextcloud / MongoDB / RAID installers	✗	✗	✓

✓ full · ~ partial / with caveats · ✗ not offered. ServerDoctor is read-only by default; every repair is consent-gated and reversible.

The bench Doctors vs the rest of the bench
Windows · Mac · Linux. Each competitor owns a column; we own the workflow.

Job	Who’s strong there	Where we stand
Hardware certification & warranty codes	PC-Doctor (OEM codes)	Live-hardware test + SMART surface scan + WinPE sweep + Memtest on the stick; keep PC-Doctor for the RMA form
Bootable cloning	Macrium, EaseUS, AOMEI, Acronis	–clone-system: whole-disk, resized, Apple + Linux partitions, Server, in the tool that also diagnoses
Scheduled retained backups	Macrium, Acronis, Veeam Agent	–backup: dated hardlinked GFS snapshots on the OS’s own copy tools
Deep data / RAID recovery	R-Studio, DMDE, UFS Explorer	–raid-recover (mdadm 0/1/5/6/10, degraded) + –carve multi-filesystem
Failed-NAS recovery	R-Studio, UFS Explorer, DiskInternals	–nas-recover (Synology SHR / QNAP / Asustor); –areca-recover by analysis
Component benchmarks	PassMark, AIDA64, HWiNFO	–benchmark: repeatable score + self-trend + the storage-class call
All-on-one-stick toolkits	Hiren’s, Medicat	They launch other people’s tools; we diagnose, decide and write the case file
FileVault / encrypted recovery	Passware, ElcomSoft, Paragon	–unlock: AES-XTS decrypt with a known key, self-checked against the FS magic
Email deliverability	MXToolbox, GlockApps	EmailDoctor audits and writes the DNS fix; they check and monitor
Fleet / RMM	NinjaOne, Atera, Action1	Different class — always-on agents; our fleet is visit-history, run alongside an RMM

Capability matrix across the family

Capability	Win	Mac	Linux	Email	Server
10-second vitals + ranked triage	✓	✓	✓	~	✓
Case file + browser-readable report	✓	✓	✓	✓	✓
Bootable whole-disk clone	✓	✓	~	✗	✗
Retained / bare-metal backup	✓	✓	✓	✗	✓
Deep data / RAID / NAS recovery	✓	✓	✓	✗	✗
Benchmark + “slow or old?” / drive health	✓	✓	~	✗	✓
Attack / brute-force detection	~	✗	~	✗	✓
Performance tuning, applied	✗	✗	✗	✗	✓
WordPress security / forensics / IR	✗	✗	✗	✗	✓
Deliverability / DNS-auth fix	✗	✗	✗	✓	~
Host hardening + SSH 2FA	✗	✗	✗	✗	✓

✓ full · ~ partial · ✗ not this doctor’s job.

Pricing

The bench Doctors

ServerDoctor — licensed separately (proposed Server/MSP ladder)

Proposed ServerDoctor pricing — anchored to “cheaper than the stack it replaces.” A single
hosted WordPress server covered by the incumbents (security + backup + migration) runs roughly
$400–800/yr before labour. Final numbers pending owner sign-off.