Network and web security
Network and web security, from office network to website
Security assessment of your office network, servers and website, covering open ports, weak passwords and outdated software.
Vulnerabilities found on the network, server and website are remediated.
Starting point
The work begins with a review of the current state: services exposed to the outside, each person's access level and where backups are stored. A list of actions with the cost of each is then provided, and you decide which to proceed with.
Scope of work
Service components
- 01
Firewall and open ports
External access is limited to essential services, and all other ports are closed.
- 02
Staff access and passwords
Each user's access is limited to their work requirements, and two-step login is enabled where supported.
- 03
SSL certificate and encryption
Every page opens over HTTPS, and the certificate is renewed before it expires.
- 04
Server hardening
SSH access and security headers are configured, and unnecessary services on the server are disabled.
- 05
Site and plugin updates
The CMS, theme and plugins are updated, and unsupported plugins are removed.
- 06
Backups
Automatic backups to a separate server, with a test restore to verify them.
Results after launch
Minimal external exposure
Services reachable from outside are limited to those required.
Access control
Each person's access level is defined, and access is revoked when an employee leaves.
Tested backups
Backup restoration is tested before handover.
Documentation
All changes are documented for your technical team or future contractors.
Workflow
Implementation
- 01
Discovery call
The network, servers, website and the list of people with access are reviewed in a joint session.
- 02
Current-state review
With your authorisation, services exposed from outside and inside the network are reviewed.
- 03
Action list and costs
Actions are listed by priority with the cost of each, and you select which to proceed with.
- 04
Implementation
Changes are applied during hours with the least impact on your operations.
- 05
Re-check
After implementation, the initial review is repeated to verify the changes.
Prerequisites
Owner authorisation
Domain ownership verification
Via a DNS record or a file uploaded to the site, for website-related work.
Written authorisation for the network
For work on office networks and servers, written authorisation is obtained from the organisation's management.
Temporary access
Access granted for the work is revoked after handover.
Pricing
Review and implementation costs
The wallet is topped up in advance, and the cost of each job is deducted after your approval.
Current-state review
Covers the review and the action list; priced separately from implementation.
Implementation of actions
Each action on the list can be selected individually.
Periodic re-check
The review repeated at an interval you set, priced separately.
Technologies and tools
- Firewall
- VPN
- SSH
- TLS 1.2 / 1.3
- HSTS
- Content-Security-Policy
- 2FA
- Backup
Questions
Common questions
Changes are agreed in advance and applied during off-peak hours, and every change can be rolled back.
Yes. The scope can be limited to the website and its server.
Penetration testing is not part of this service; if required, it is carried out under a separate contract and schedule.
They are used only for the duration of the work. After handover, LIDTAK's access is revoked and changing the passwords is recommended.
Only you. The list is kept in your account and is not published.
For other questions, contact a LIDTAK specialist.
Book a free consultation