Infrastructure Security Audit
A practical review of Linux, network, databases, virtualization, backup and monitoring infrastructure.
A practical security and reliability review of production infrastructure: Linux, databases, network exposure, monitoring and backup/recovery. The goal is not to generate a huge vulnerability list. The goal is to find real weaknesses, show the evidence and explain what should be fixed first.
What I check
- Linux server configuration
- SSH, root and sudo access
- Firewall, exposed services and VPN
- MySQL and PostgreSQL security
- Docker and virtualization
- Proxmox configuration
- Backup architecture, isolation and recovery readiness
- Monitoring, alerting and external availability checks
What you get
For every relevant finding:
- severity
- evidence
- actual risk
- remediation recommendations and implementation sequence with PLAN or IMPLEMENT
- retest result when included in the scope
How it works
- We agree on scope and authorized systems.
- I review the infrastructure and collect evidence.
- You receive a prioritized report.
- With PLAN, you also receive implementation recommendations. With IMPLEMENT, I carry out the agreed hardening and fixes.
From findings to implementation
REVIEW provides findings; PLAN adds remediation recommendations and an implementation sequence. Choose IMPLEMENT for agreed production hardening and fixes. You can also use the report with your own team. Wider database changes, monitoring or backup and recovery projects can be scoped separately.
Packages & pricing
Choose the outcome you need: understand the current state, get a practical implementation plan, or have the agreed changes delivered in production. REVIEW and PLAN do not include production changes.
3–5 business days
- Review security and reliability in the agreed systems
- Identify weaknesses and document evidence
- Receive a concise findings report
5–10 business days
- Everything in REVIEW
- Receive prioritized remediation recommendations
- Get an implementation sequence and verification checklist
Schedule agreed after assessment
- Assessment and remediation plan included
- Apply agreed hardening and fixes in production
- Verify changes and hand over the results
Indicative delivery times start after the agreed kickoff and receipt of the required access and information. Scope, dependencies and maintenance windows may affect the schedule; timing is confirmed before work.
Each package is a separate engagement; you do not need to purchase all three. Scope and deliverables are agreed before work. Implementation starts from €999; the final quote depends on system count, complexity and the changes required. Ongoing support and 24/7 incident response are quoted separately.
Tell me about your infrastructure
Describe your environment, the problem and the outcome you need. Scope and access are agreed before work. Do not send passwords, keys, database dumps or other secrets.