Security hardening
Infrastructure that does not become a liability.
Most break-ins are not clever. They find a default setting, an open port or software nobody updated. BespokeForge checks the server for known weaknesses, closes the obvious ways in, and writes down what changed and why.
Security hardening
- Part of
- Infrastructure
- Engagement
- Build, Optimise
- Starts with
- The audit, €450, fixed
- Price
- Scoped from the audit, quoted then
The work
The obvious ways in, closed and written down.
What it includes
- Full infrastructure security audit
- SSH hardening: key-only authentication, fail2ban configuration
- Firewall rule review and tightening
- Application-layer security hardening: WordPress, PHP, Nginx
- Malware scan and removal, on a system taken on through the audit
- Security monitoring and alerting configuration
- Written remediation report with documented rationale
What changes for the business
- Attack surface significantly reduced across all identified vectors
- Security posture documented and measurable
- Monitoring alerts configured for anomalous activity
- Open vulnerabilities closed with documented rationale for each
In production at Ampy and Lampstand
Measured, not described.
Each figure names where it comes from.
Ampy A+ SSL Labs rating for ampy.se and every Ampy town site: TLS 1.2 and 1.3 only Qualys SSL Labs, October 2026
Lampstand Zero Plugins, page builders or themes to keep current, so none to fall behind on lampstandeduconsult.org, October 2026
How it runs
From the audit to a system you own.
The audit
€450, fixed. Twenty-five minutes first, free. The written record is yours whatever you decide.
The build
A scope and a price agreed before work starts.
Operate
A retainer keeps the engineer who built or took on the system on it, for as long as the business depends on it.
Questions
Questions this usually comes down to
Yes. The audit records what is there, then the work is taken on as it stands or rebuilt where it has to be.
You do: the access, the documentation and the code are yours.
It is scoped from the audit and quoted then, before any work starts.
Start here
Start with what you have now.
A free 25-minute call confirms the problem is one BespokeForge can solve. If it is, the audit follows: €450, fixed.