๐Ÿ–ฅ๏ธ Linux Server

Linux Server Security & Performance.

Audit, harden, stabilize, or recover your Linux servers. Hands-on, production-grade โ€” not automated scanners and PDF reports.

One-Time Packages

Audit only, full hardening, migration, or emergency recovery. All include a 7-day warranty.

Package 1

Security Audit Only

Best for: Know exactly what's exposed before committing to fixes

$349
Per server ยท One-time
โฑ 2โ€“4 business days
โœ“SSH configuration review (key auth, root login, port, allowed users)
โœ“Firewall rules audit (UFW/iptables โ€” open ports, exposed services)
โœ“Running services review โ€” identify unused, risky, or misconfigured daemons
โœ“User & access audit (root usage, sudo policies, stale accounts, SSH keys)
โœ“Kernel & sysctl parameter review (network hardening, core dumps, ASLR)
โœ“Package & patch posture โ€” outdated packages, unattended upgrades status
โœ“Log review โ€” auth logs, syslog, fail2ban status
โœ“Web stack review if present (Nginx/Apache config, headers, TLS)
โœ“Full written audit report: every finding with severity and recommended fix
Package 2Most Popular

Hardening + Optimization

Best for: Full baseline hardening with performance tuning applied

$699
Per server ยท One-time
โฑ 3โ€“5 business days
โœ“Everything in Package 1, plus:
โœ“SSH hardening (key-only auth, disable root, custom port, AllowUsers)
โœ“UFW/iptables firewall โ€” allow-list policy, close all unnecessary ports
โœ“Fail2ban setup (SSH, web login, repeat offenders)
โœ“Service cleanup โ€” disable/remove unused daemons
โœ“Kernel/sysctl hardening (network stack, IP spoofing protection, ICMP control)
โœ“Unattended security updates configured
โœ“Resource monitoring setup (CPU, RAM, disk, load alerts)
โœ“Web stack hardening & HTTP security headers (if applicable)
โœ“Log rotation, centralized auth logging, anomaly baseline
โœ“Hardening summary document โ€” what changed, why, verification notes
Package 3

Migration + Stabilization

Best for: Moving to a new server or stabilizing a messy, inherited environment

From $899
One-time ยท Quoted per scope
โฑ 5โ€“10 business days
โœ“Source server audit + documentation (services, configs, data)
โœ“Target server provisioning with hardened baseline
โœ“Application/service migration (web stack, DB, cron, backups)
โœ“DNS cutover planning and execution
โœ“Post-migration verification and smoke testing
โœ“Hardening applied to target environment
โœ“Migration runbook + handover documentation

Quoted based on number of services, data volume, and complexity.

Package 4๐Ÿšจ Emergency

Emergency Recovery / Compromise Cleanup

Best for: Server compromised, cryptominer running, abnormal CPU, unknown processes, rootkit suspected

$599 โ€“ $1,199
One-time ยท Emergency priority
โฑ Same day โ€“ 3 business days
โœ“Triage: identify active threats, suspicious processes, unauthorized access
โœ“Attacker persistence removal (backdoors, cron jobs, SSH keys, rogue users)
โœ“Rootkit scan and removal (chkrootkit, rkhunter)
โœ“Log forensics โ€” identify entry point, timeline, scope of compromise
โœ“Full server re-hardening after cleanup
โœ“Reinfection prevention โ€” patch the actual entry point
โœ“Incident report: what happened, how, what was done

Quoted after initial triage. Price depends on infection depth and scope.

Add-Ons

Extend any package with these optional extras.

Cloudflare Tunnel setup (remove direct port exposure)$200 โ€“ $400
Intrusion detection setup (AIDE, auditd, or equivalent)$149
Centralized log forwarding (to S3, Loki, or equivalent)$199
Automated backup to S3 or Backblaze$149
Load testing + performance benchmarking$199
Second server / additional server in scope$299/server
Documentation / SOP pack$99

Monthly Server Care

Ongoing monitoring, patching, and support on a monthly retainer.

Server Care Basic

$299/month
1 server ยท 2 support hours/month
Extra: $70/hour beyond included
  • โœ“Weekly automated security scans (rootkit, auth anomalies)
  • โœ“Patch & update monitoring โ€” flag critical CVEs
  • โœ“Resource monitoring with alert thresholds
  • โœ“Response within 48 business hours

Server Care Standard

$549/month
Up to 3 servers ยท 5 support hours/month
Extra: $65/hour beyond included
  • โœ“Everything in Basic, plus:
  • โœ“Weekly manual log review (auth, syslog, anomaly check)
  • โœ“Monthly access & user audit
  • โœ“Patch application (security patches tested + applied)
  • โœ“Response within 24 business hours

Server Care Priority

$999/month
Up to 8 servers ยท 10 support hours/month
Extra: $60/hour beyond included
  • โœ“Everything in Standard, plus:
  • โœ“Emergency incident response included
  • โœ“Architecture guidance + scaling reviews
  • โœ“Monthly security posture report
  • โœ“Priority response SLA

What's Not Included

  • โœ•VPS or cloud server cost (client's own)
  • โœ•Managed hosting upgrades or migrations to paid tiers
  • โœ•Application-level code fixes (flagged in audit, quoted separately)
  • โœ•Third-party provider downtime or upstream issues
  • โœ•Database migrations requiring schema changes
  • โœ•Full application rewrites or redesigns

๐Ÿ”’ Access & Scope Control

All work is performed on client-granted access only. Every change is logged and documented. You retain full control at all times.

๐Ÿ›ก๏ธ 7-Day Warranty

All hardening packages include a 7-day warranty. Issues within scope are addressed at no extra charge.

Server issue? Let's look at it.

Book a call, describe what's happening, and we'll recommend the right starting point.