Browse categories
Explore
Fiverr Pro
English
$
USD
I will harden and secure your linux server against attacks
Linux, VMware and ISO 27001 Infrastructure Engineer
I keep business systems running - and make sure they pass the audit.
Six years in production infrastructure: VMware vSphere, Red Hat Enterprise Linux, Windows Server, Active Directory and AWS. I led ...
About this Gig
Your Linux server is exposed the moment it gets a public IP. Default SSH, open ports, no fail2ban, patches months behind - that is what automated scanners hunt for, and they find it within hours.
I harden Linux servers properly, and I give you the evidence.
WHAT YOU GET
- Security audit with prioritised findings, in plain English
- SSH lockdown, key-only auth, firewall rules, fail2ban, automatic security updates
- CIS Level 1 baseline with SELinux or AppArmor (Premium)
- Before-and-after report you can hand to a client, an insurer or an auditor
WHY ME
Six years running production infrastructure across RHEL, Ubuntu, VMware and AWS. RHCSA and CISA certified. I led the technical work behind a Dubai company's first ISO 27001:2022 certification - so I harden to audit standard, not a blog checklist.
WORKS WITH
Ubuntu, Debian, RHEL, CentOS, AlmaLinux, Rocky. VPS, dedicated or cloud - AWS, Azure, DigitalOcean, Hetzner.
Not sure what you need? Start with the audit - a clear report of what is wrong and what it takes to fix, no obligation.
Message me first if your setup is unusual. I will tell you straight if I am not right for it.
Operating system:
Windows
•
Linux
•
OSX
•
Vmware
•
BSD
My Portfolio
FAQ
Will hardening break my server or cause downtime?
No. I work in a maintenance window you choose, change one thing at a time, and keep a rollback for every change. New SSH access is always verified on a second session before the old config is closed, so you cannot get locked out.
You need root access. How do I know that is safe?
Create a dedicated sudo user for me and remove it when the order closes. I never ask for credentials in chat, I only touch what you have scoped, and you get a written log of every change I make.
Which package should I choose?
If you do not know what is wrong, start with Basic - the audit tells you. If you know the server has never been hardened, take Standard. Choose Premium if you need a CIS baseline for a client, an insurer or an audit.
Do I need to be online while you work?
No. Send SSH details and a maintenance window, and I work through it and report back. If I hit anything that needs a decision from you, I stop and message you rather than guessing.
My server may already be hacked. Can you help?
Hardening is prevention, not incident response. If I see signs of an active compromise during the audit I will tell you straight away and explain your options, but cleaning a breached server is separate work.
What exactly do I receive at the end?
A written report listing every change made, the before and after state, and anything I recommend but did not do. You also get the configuration files I changed, so another engineer can review or reverse any of it. All of it is yours.
