Hardening and Secure Pipeline
The server and the delivery pipeline made safe: ports closed, TLS current, secrets out of the code, dependency and secret scans on every change, and backups that have actually been restored. A written quality bar your team can keep.
Quoted per environment at EUR 90 per hour excl. VAT. Included in every modernization project. Bookable on its own for a system you inherited.
- Server hardening
- Secrets handled
- Security gates in CI
- Backups that restore
One engagement. Clear deliverables.
Firewall, SSH, TLS, updates, users and sudo, logging. Checked against a written list.
Out of the repository, into a vault or environment, rotated where they leaked.
Dependency audit, secret scan and static analysis that fail the build.
A restore performed and timed, written down with the recovery time.
Uptime, disk, certificates and failed jobs reach a person before a customer does.
Numbers and the commands that check them, so nobody lowers it quietly.
- 01
Intro call and read access to the server and the pipeline.
- 02
Findings list, ranked, with the hours per item.
- 03
Fixes in agreed order, each verified.
- 04
Written quality bar and the runbook handed over.
This is not a penetration test of the application itself; that is the Security Assessment. No uptime guarantees from one person.
Terms in short- Amounts excl. VAT, quote valid 14 days.
- Payment within 14 days, acceptance within 7 days.
- Rights pass to you on full payment.
- General terms and NDA as PDF.
Phalcon to Laravel, module by module, while the platform stayed in daily use. No big-bang switch, no rewrite from scratch.
When was the last restore test?
If the answer is "never" or "not sure", that is the first thing I would do. Tell me where it runs and I reply within one working day, free.