Launching a VPS without securing it is like leaving your car unlocked. We apply these 5 settings on every delivery:
1. Change the SSH port
Port 22 gets hit by bots from all over the world every second. Move it and the noise disappears.
2. Keys only, no weak passwords
Enable SSH key login and disable password access. Goodbye dictionary attacks.
3. Firewall + fail2ban
Close everything except what is needed (22, 80, 443) and ban IPs that fail 5 times.
4. Automatic security updates
Turn on unattended-upgrades: critical patches install themselves overnight.
5. An external backup that actually works
A backup is useless if you never test it. Restore one every month, in 5 minutes.
No time? Our managed care add-on ($12/month) sets it all up and keeps watch.