Security

Close the doors attackers try first.

Lock down servers and put Cloudflare or a WAF in front of your app.

Sample report · redacted
Security audit — ████████ web app
v1.0
1
Critical
2
High
1
Medium
1
Low
  • Critical
    Admin API reachable without a session
    API · /admin/█████
  • High
    Password reset token does not expire
    Auth · reset flow
  • High
    Secret key committed to repository
    Repo · config/█████.ts
  • Medium
    No rate limit on sign-up and OTP
    API · /auth/████
  • Low
    Missing security headers
    Web · all pages

Illustration of our report format. Details are invented and redacted.

Server

$1,500

Prices in USD. Pay in your local currency at checkout.

Edge protection plus server hardening.

7-day delivery
  • Everything in Edge
  • Up to 3 servers hardened
  • Origin locked to Cloudflare only
  • SSH, firewall and patching
  • Backups checked + restore test
  • Hardening report
Continue · $1,500Book a call instead

NDA on request · Authorised testing only · Reports shared only with you

No call needed to order. If your project needs a conversation, our team contacts you before starting.
About this service

We harden your servers and hosting: SSH and access, firewall rules, patching, least-privilege accounts, backups and logging. Then we put your app behind Cloudflare or another web application firewall with rate limits, bot protection and an origin lock, so only clean traffic reaches you.

Every change is documented, with a rollback plan, and done in agreed windows.

Compare packages
Package
Basic
Edge
$600
Standard
Server
$1,500
Premium
Platform
$3,500
Domains / servers1 domain3 servers10 servers
WAF + rate limits
Origin lock
Backup restore test
Cloud IAM review
Logging + alerts
Delivery3 days7 days14 days
SelectSelectSelect
Add-ons
Extra server+$250

Harden one more server

3 months monitoring+$900

We watch alerts and respond for 3 months

What we need from you
  • 01Admin access to the hosting / cloud accounts in scope (temporary)
  • 02Access to your DNS provider
  • 03A list of services that must stay online
  • 04A maintenance window that suits you
Don't have everything yet? Order anyway. We confirm what we need on our first contact, and your delivery time starts once we have it.
FAQ

About this server hardening & waf setup

Something else? Email [email protected].

Changes are planned to avoid downtime. Where a short restart is needed, we do it in your chosen window with a rollback ready.

Not necessarily. We can set up the WAF your host provides. Cloudflare is often the fastest and most affordable option.