I will audit and harden your linux server against attacks

• One exposed SSH port or outdated package is all it takes. I'll lock your server down properly.

I'm a Senior Linux Engineer (15+ years) and certified penetration tester (eCPPT, eWPTX). I harden servers based on how attackers actually break in.

Hardening includes (tailored to your setup):

• Full security audit first, you get a findings report
• - SSH: key-only auth, root login disabled, port and policy hardening
• - Firewall (nftables/iptables/firewalld) + fail2ban intrusion blocking
• - SELinux/AppArmor configured properly (not just disabled)
• - Kernel and package updates, removal of unnecessary services (FTP, telnet)
• - Password and account policies, sudo review
• - Centralized or local logging (rsyslog/auditd), optional web log dashboard
• - CIS-benchmark-aligned configuration
• - Before/after report with everything documented

Works on any distro: Ubuntu, Debian, RHEL, CentOS, Alma, Rocky and more.

Production server? I work in agreed maintenance windows with a zero-downtime approach.