← Posts

Five security controls every server should have

Most of the incidents we handle could have been avoided with simple measures. These are the first ones we check on any new server.

When we take over a server, the first job isn't installing anything: it's closing doors.

1. Key-only access

No SSH passwords. Keys, least-privilege users and a log of every login.

2. Allow-list firewall

Open what's used and nothing else. Every open port needs an owner and a reason.

3. Automatic security updates

Critical patches can't wait for the next maintenance visit.

4. Backups that get tested

A backup that has never been restored is an assumption. We schedule test restores.

5. Monitoring with alerts

Disk, memory, certificates and services going down. If something breaks, the alert reaches a phone, not an inbox nobody reads.

  • Seguridad
  • Servidores
  • Buenas prácticas

Keep reading

More posts

See all

Have a project in mind?

Tell us what you need and we'll reply the same day.

Let's talk