Server audit and hardening
A full security and deliverability review, with the fixes applied
What you get out of it.
Find weak spots first
We test the same doors attackers try: SSH, PHP, mail and outdated software.
Protect mail reputation
Correct SPF, DKIM, DMARC and rDNS keep your IPs off blocklists.
Prove it to customers
A written report with before and after you can show to clients or auditors.
Everything in the service.
- SSH, firewall and brute-force protection review
- ModSecurity ruleset and PHP settings review
- Mail: SPF, DKIM, DMARC, rDNS and blacklist check
- Backup and restore test on a real account
- Account isolation review: PHP-FPM, CageFS or equivalent
- Written report with severity levels and before/after
How the work goes, step by step.
Scope and access
Read-only access first. We agree what may be changed.
Audit
About one business day of checks, scored by severity.
Fix with approval
Nothing changes without your yes. Restarts go in a window you choose.
Verify and report
We re-test every fix and deliver the final report.
Doing it yourself vs. with us.
| On your own | Plugins cPanel | |
|---|---|---|
| Coverage | What you remember to check | A repeatable 60-point checklist |
| Mail deliverability | Often skipped | Always included |
| Fixes | A to-do list | Applied and re-tested |
| Proof | None | Report with before and after |
Who it is for
- Hosts preparing for a customer or compliance audit
- Servers that were hacked or blacklisted before
- Anyone who inherited a server nobody documented
What we need from you
- Read-only root SSH access to start
- A person who approves changes
- A list of custom software and exceptions
- Your preferred restart window
Questions before you buy.
Will you change things without asking?
Never. Each fix is listed and waits for your approval.
Will there be downtime?
Most fixes need none. Anything that restarts a service goes in your chosen window.
Do you clean hacked sites?
Not in this service. We find the cause and close the door. Cleanup is quoted separately.
Other services
Plugin installation
We install and configure any plugin from our catalog on your server over SSH.
Managed support
An engineer on call for your WHM servers: updates, incidents and questions.
Migration service
We move your accounts to a new cPanel server with a rollback plan.
Put your server on autopilot this week.
Try any plugin for 30 days. If it does not fit your stack, you get your money back.