Create a kernel upgrade notification
I like to be security-conscious and keep all my servers as fresh as possible regarding security upgrades.
I assume DO periodically upgrades the default kernels used for droplets.
1) Unless you're already doing this, always load the newest stable kernel when a droplet is rebooted
2) Make it possible to opt-in to regular notifications whenever one of the default kernels that a user has droplets running on receives a security upgrade
Then I can reboot my droplets whenever a security upgrade is available.
Michał, that won't help - you can't upgrade kernel yourself for DO droplets.
Anon - You're right.
Michał Zieliński commented
Just subscribe to Debian Security mailing list: http://lists.debian.org/debian-security-announce/
I disagree heavily with #1. It is nonsense for a stable server. If you do this, make it opt-in as well.
(Notification could be via email, via a feed on your website somewhere, or via the maintenance/downtime notification feed. Not really fussed about what the appropriate channel is here.)