Will hardening break anything?
We change things carefully, one step at a time, with a way back, and we focus on what attackers can reach rather than ticking every box.
Is this a one-off or ongoing?
Either. Many clients follow the audit with a managed plan so the baseline stays in place.
Do you do penetration testing?
No. Our security work is defensive: configuration audits against recognized benchmarks, then hardening and monitoring. If you need a penetration test for a contract or certification, that is a separate specialist service.
What are the CIS Benchmarks?
Published, consensus-based configuration guides from the Center for Internet Security, covering operating systems, web servers, databases and more. They are a widely used reference for what a securely configured server looks like.
Which servers can you audit?
Linux servers — Ubuntu, Debian, AlmaLinux, Rocky Linux and similar — including cPanel and virtualization hosts, on any cloud or in your own data centre. We don’t audit Windows servers.
Do you need full access to our servers?
We need administrator access to review configuration properly. Access is agreed with you, used only for the audit and the fixes you approve, and can be removed as soon as the work is done.
How do you keep servers secure after the audit?
On a managed plan we keep the baseline in place: planned updates, live kernel patching, malware scanning and a web firewall, monitoring and a monthly report of what changed.
We already have a firewall. Isn’t that enough?
A firewall is one layer. Most real incidents start somewhere else: a weak or shared login, an outdated plugin or package, a forgotten service, or backups nobody checked. The audit looks at all of these together, so one strong layer isn’t hiding several weak ones.