Server Hardening

Linux server hardening for UK small businesses

Reduce the attack surface of one Linux server or VPS through agreed SSH, firewall, account and service configuration changes, with a documented handover.

From £650

Before work starts

  • Written scope and fixed quote
  • Current backup confirmed
  • Maintenance window agreed
  • Material changes approved
Scope

What's Covered

A focused review and practical improvements tailored to the server, workload, and agreed scope.

  • SSH & remote access hardening
  • Firewall rules & network segmentation
  • Service minimization & disabling
  • User & privilege management
  • File permissions & integrity
  • Logging & audit configuration
  • Patch management strategy
  • Security baseline documentation

Security Assessment

Current state analysis identifying misconfigurations, unnecessary services, and exposure points.

Hardening Implementation

Direct implementation of security controls, or detailed runbook for your team.

Configuration Report

Documentation of all changes made with before/after comparisons.

Maintenance Guide

Ongoing recommendations for patching, monitoring, and security maintenance.

Process

How It Works

Structured approach with clear phases and minimal disruption.

01

Discovery

Understand your environment, constraints, and security goals.

02

Audit

Review current configuration against security baselines.

03

Harden

Apply controls and reduce attack surface.

04

Document

Deliver report with changes and maintenance guidance.

Example

Sample Hardening Report

Every engagement includes detailed documentation of findings and changes.

hardening-report.mdIllustrative
# SSH Hardening
Before: PermitRootLogin yes
After: PermitRootLogin no
# Firewall Rules
Before: Unnecessary ports exposed
After: Only agreed services exposed
# Services Disabled
Unneeded services identified and disabled with approval
FAQ

Common Questions

Which operating systems do you support?

Linux servers. I confirm the distribution, workload and access requirements before quoting.

Will hardening disrupt my applications?

Changes are planned carefully. I test in stages and can work during maintenance windows to minimize risk.

Do you implement the changes or just recommend them?

Both options available. I can implement directly with your approval, or provide detailed runbooks for your team.

How long does a hardening engagement take?

It depends on scope and complexity. You receive a timeline and fixed quote after the discovery call.

Not sure whether this fits?

Describe the system and the outcome you need. I’ll tell you whether I can help and what the next step would be.