For me security is not fear marketing but traceable measures with clear benefits. You receive a prioritised report and, if you wish, the implementation from one source.
What is included
- Security review of Linux servers: services, permissions, updates, SSH, firewall, logging
- Hardening based on CIS benchmarks at an appropriate depth, Fail2ban, AppArmor or SELinux, automatic updates
- Two-factor authentication and passkeys (FIDO2/WebAuthn) for portals, VPN and admin access
- Monitoring with Zabbix, Checkmk or Prometheus and Grafana, alerting via email, Telegram or SMS
- Backup strategies following the 3-2-1 rule with Restic, Borg or Proxmox Backup Server, encrypted and offsite
- Regular restore tests and documented emergency plans
- Review of web applications for typical vulnerabilities (OWASP Top 10) including report
- Incident response: analysis of compromised systems, cleanup, clean rebuild
Typical assignments
- After a ransomware incident at a partner, a company wants to know whether it would be protected itself: review, report, implementation within two weeks.
- A customer portal gets passkeys and two-factor authentication without annoying the users.
- Backups had been failing for months without anyone noticing: monitoring and restore tests create certainty.
- A web server was hacked: analysis, cleanup, rebuild with hardening and a report for management.
Process
Request
Describe your needs briefly via the form, WhatsApp or the live chat.
Assessment
Within one business day you receive an assessment with effort, price and a proposed date.
Implementation
I do the work personally, remotely via secured access or on site, and keep you updated throughout.
Handover and invoice
Documented handover, then an invoice from KernelHost GmbH with convenient payment via kernelhost.com.
Questions about this service
How does a security review work?
After approval I check configuration, services, access and updates, partly automated, partly by hand. You receive a report with prioritised measures and an effort estimate.
Are my backups safe if they run daily?
Only when the restore is tested regularly and a copy is stored off site. I set up and monitor both.
Do you also take over ongoing monitoring?
Yes. I set up the monitoring, alerts go to you and on request to me. Handling alerts and fixed maintenance appointments are billed based on effort or from an hour bundle, without a base fee.
Remote for companies across Germany, alignment via video call, ticket or chat.