Server hardening
Locking down the operating system and server software, cutting back access rights and switching off services nobody uses.
SECURITY HARDENING
Hardening of servers, networks and services
Many breaches start with a default password, an old account nobody removed or a patch nobody applied. Razban works through the findings of a security assessment and reconfigures your servers, network devices and web services so there is less for an attacker to use.
Hardening scope
Firewall access policies
Rules on your next-generation firewall that let through only the traffic the business depends on.
Network segmentation
Splitting the network by role and sensitivity, so an intruder who gets into one segment cannot roam the rest.
WAF and DDoS protection
A web application firewall in front of your sites and web apps, plus a layer that absorbs denial-of-service floods.
Patching schedule
Operating systems and software updated on a fixed cycle, so published vulnerabilities do not stay open on your servers.
Verification
Once the changes are in, we check that each finding from the test has actually been closed.
Scope of the hardening service
What we harden
- Server operating systems and services
- Next-generation firewalls and access policies
- Network structure and segmentation
- The path to your websites and web-based systems
- The patching schedule
What you receive
- Secure configuration applied in order of risk
- A check that each assessment finding has been closed
- Regular patching once the changes are in
Suited to
- Organizations with a penetration test or security assessment report
- Servers and equipment on your premises or with another provider
- Infrastructure that was set up with default configurations
Hardening, step by step
- 1
Findings
We start from a penetration test report, either ours or one you already have.
- 2
Change plan
Each finding is matched to a configuration change, an access restriction or an update, in order of risk.
- 3
Changes applied
Servers, firewalls, segments and web services are reconfigured in agreed maintenance windows.
- 4
Check and patch
The fixes are verified and a regular patching cycle takes over.
Frequently asked questions
Can hardening be done without a prior penetration test?
Hardening is based on the findings of a security assessment. If there is no assessment report, the first step is a review of the current configuration of your servers and equipment.
How is hardening different from penetration testing?
A penetration test finds the weaknesses and ranks them. Hardening is the work that removes them: changing configurations, restricting access and installing updates. One usually follows the other.
How is hardening different from Razban Shield?
Razban Shield is a product installed on a server or website that adds features such as a web application firewall and two-factor login. Hardening is a service in which Razban specialists review and correct the configuration of your servers, network devices and services.
Is hardening included in managed secure hosting?
Yes. On managed secure hosting Razban hardens the server before your site goes live and keeps it patched afterwards, together with the web application firewall.
Infrastructure hardening
Send us a list of your servers, network devices and public services, and we will propose what to harden first and when.