Kategorien durchsuchen
Entdecken
Fiverr Pro
Deutsch
$
USD
I will audit and harden the security of your linux servers
Your infrastructure problems, solved
System Infrastructure and DevOps Specialist With over 8 years of experience in critical, regulated environments, particularly in the security sector, I specialize in Linux and Windows system administr...
Geprüft von Fiverr Pro
Peio V. wurde vom Fiverr Pro-Team aufgrund besonderer Expertise ausgewählt.
Geprüft für
DevOps-Engineering
Support & IT
Über diesen Service
Vetted Pro
Most servers are not compromised through anything sophisticated. They are compromised through a port that should not have been open, a package that stopped getting updates two years ago, and a root login with a password.
I'm a System Infrastructure and DevOps Specialist with 8+ years of experience in critical, regulated environments, most of it in the security sector. Hardening is where I have spent my career, not a side interest.
The audit covers what is actually exposed: open ports and services, SSH configuration, users and sudo rules, firewall, patch level, file permissions, logging, and whether your backups actually restore.
You get a written report with every finding rated by real risk, not by scanner severity, and a fix in plain language for each one. From Standard upwards I implement the fixes as well.
Basic is the audit and the report.
Standard is the audit plus implementation of the findings.
Premium adds monitoring, intrusion detection, log centralization and an incident runbook.
I do not run a scanner and forward you the PDF. Every finding is verified by hand.
Packages are a reference. Tell me what you need and I'll send a custom offer priced for your case.
Betriebssysteme:
Linux
•
Unix
FAQ
Is this a penetration test?
No, and be careful with anyone selling one on a marketplace. This is a configuration and exposure audit performed with your access, from inside. It finds the things that actually get servers compromised. A pentest is a different engagement with a different scope and its own legal paperwork.
Will you break anything while hardening?
No changes are made without telling you what and why. Everything reversible is documented so it can be undone, and services are verified working after each change. In Standard and Premium there is a retest at the end specifically to confirm nothing stopped working.
Do I get something I can show a client or an auditor?
Yes. The report is written to be read by someone who is not a sysadmin, with findings rated by real risk and a clear statement of what was fixed and when. It is not a scanner dump.
Can you help us meet ISO 27001, SOC 2 or similar?
I can harden the infrastructure and document it to a standard that supports the technical controls. Certification itself involves an auditor and processes well beyond the servers, and I will not pretend otherwise.
What access do you need?
SSH with sudo, or read only access for the audit if you prefer to apply the fixes yourself. Temporary credentials are fine and you rotate them on delivery.
How often should this be repeated?
Once or twice a year for most setups, or after any significant change. A one time hardening degrades: packages age, people add rules and open ports and forget.
