What I do

• Firewall rules: incoming traffic limited to the ports your services actually use; everything else is closed.
• SSH access: sign-in with keys instead of passwords, root sign-in switched off, and repeated failed attempts blocked.
• Updates: security updates applied, and automatic updates set up where they are safe to run.
• HTTPS: certificates installed and renewed automatically.
• Services reviewed: anything listening that should not be is switched off or restricted.
• Backups: scheduled backups, and a restore actually tried, so you know they work.

What you get at the end

• A plain written list of every change, and how to undo it.
• Notes on what to keep an eye on afterwards.

What this is not

This is hands-on setup work on your server. It is not round-the-clock monitoring, and it is not a compliance certification.

How I work

• You tell me what runs on the server and who needs to reach it.
• I review it and agree every change with you before I make it.
• I make the changes, check that your services still work, and hand over the list.

Pricing

The work is quoted after a short conversation about your server. See how pricing works.