Close the doors attackers try first.
Lock down servers and put Cloudflare or a WAF in front of your app.
- CriticalAdmin API reachable without a sessionAPI · /admin/█████
- HighPassword reset token does not expireAuth · reset flow
- HighSecret key committed to repositoryRepo · config/█████.ts
- MediumNo rate limit on sign-up and OTPAPI · /auth/████
- LowMissing security headersWeb · all pages
Illustration of our report format. Details are invented and redacted.
Server
$1,500Prices in USD. Pay in your local currency at checkout.
Edge protection plus server hardening.
- Everything in Edge
- Up to 3 servers hardened
- Origin locked to Cloudflare only
- SSH, firewall and patching
- Backups checked + restore test
- Hardening report
NDA on request · Authorised testing only · Reports shared only with you
We harden your servers and hosting: SSH and access, firewall rules, patching, least-privilege accounts, backups and logging. Then we put your app behind Cloudflare or another web application firewall with rate limits, bot protection and an origin lock, so only clean traffic reaches you.
Every change is documented, with a rollback plan, and done in agreed windows.
Harden one more server
We watch alerts and respond for 3 months
- 01Admin access to the hosting / cloud accounts in scope (temporary)
- 02Access to your DNS provider
- 03A list of services that must stay online
- 04A maintenance window that suits you
Changes are planned to avoid downtime. Where a short restart is needed, we do it in your chosen window with a rollback ready.
Not necessarily. We can set up the WAF your host provides. Cloudflare is often the fastest and most affordable option.