Server hardening

Your server, locked down for you.

Connect your server. We apply a proven security baseline, prove it worked, and send you a report.

Get a quote How it works

The baseline

What we change on your server.

A new server is open by default. This closes the doors attackers try first.

Login by key only

Password logins and direct root login are switched off. Only people holding your keys can get in.

A firewall that is on

Everything is blocked unless you need it. The login port throttles anyone who hammers it.

Automatic security updates

Important patches install themselves, so you are not exposed while you wait to remember.

A safe admin account

A named administrator with the right access, instead of everyone sharing the default user.

Settings proven, not assumed

We read back what the server is really running after each change. Files can say one thing while the server does another.

A report you can keep

What we found, what we changed and what to do next, in plain English.

How it works

Four steps. You stay in control.

You keep ownership of the server the whole time.

Tell us about itYour provider, your Ubuntu version and what runs on it. We give you a quote.

Connect itYou run one command we give you. It adds a key you can remove at any time.

We harden and verifyWe apply the baseline, check each change, and test that you can still log in.

You get the reportWe send the report and remove our access, or keep watching if you ask us to.

Want ongoing protection too? Huupa can scan the websites on your server every day and repair what it finds. See how that works.

Questions

Before you connect anything.

We would rather answer on WhatsApp than have you guess.

Which servers can you harden?

Ubuntu servers from any provider, such as OVH, DigitalOcean, Hetzner or AWS. Today we work with Ubuntu 24.04 and newer. Tell us what you run and we will confirm before you pay.

Will hardening break my website?

The baseline changes how people log in and which ports are open, not your website files. We check every change before it is applied and undo it if the server rejects it, and we leave a working way in open until the new settings are proven.

Do you keep access to my server afterwards?

Only if you want us to keep watching it. Otherwise we remove our access when the work is done and tell you that we did.

What do I get at the end?

A plain-English report of what we found, what we changed and what we recommend next, with the real settings your server is now running.

Get your server hardened.

Tell us what you run. We reply with a quote and the exact steps.

Get a quote