Managed security tooling

We deploy, harden and hand over a small set of open, self-hosted security tools, with runbooks your team can operate.

  • SIEM: log and security monitoring

    Collects logs from servers, endpoints and network devices, and alerts on security events.

    Tool we deploy
    Wazuh
    Hardening included
    • Dashboard served over TLS with named admin accounts
    • Default credentials rotated
    You receive
    • Runbook for daily operation, backups and upgrades
    • Admin handover of accounts and configuration to your team
    • Optional managed support after handover
    Managed support
    Optional monthly retainer, scoped and quoted per environment.

  • Uptime, service and website monitoring

    Checks that your websites, APIs and services respond, and alerts your team when one fails or slows.

    Tool we deploy
    Uptime Kuma
    Hardening included
    • Admin interface served over TLS behind the reverse proxy
    • Two-factor authentication on admin accounts
    You receive
    • Runbook for daily operation, backups and upgrades
    • Admin handover of accounts and configuration to your team
    • Optional managed support after handover
    Managed support
    Optional monthly retainer, scoped and quoted per environment.

  • Network and system performance monitoring

    Tracks CPU, memory, disk, network and service health across servers and network devices, with threshold alerts.

    Tool we deploy
    Zabbix
    Hardening included
    • Web frontend served over TLS
    • Default admin account disabled
    You receive
    • Runbook for daily operation, backups and upgrades
    • Admin handover of accounts and configuration to your team
    • Optional managed support after handover
    Managed support
    Optional monthly retainer, scoped and quoted per environment.

  • Reverse proxy and TLS certificate management

    A single controlled entry point for your web applications, with certificates issued and renewed automatically.

    Tool we deploy
    Nginx Proxy Manager or Traefik
    Hardening included
    • HTTP redirected to HTTPS
    • Admin interface not exposed to the internet
    You receive
    • Runbook for daily operation, backups and upgrades
    • Admin handover of accounts and configuration to your team
    • Optional managed support after handover
    Managed support
    Optional monthly retainer, scoped and quoted per environment.

  • Team password manager

    A shared vault for team credentials, with access controlled per collection.

    Tool we deploy
    Vaultwarden
    Hardening included
    • Public sign-up disabled
    • Admin page disabled or protected by a strong token
    You receive
    • Runbook for daily operation, backups and upgrades
    • Admin handover of accounts and configuration to your team
    • Optional managed support after handover
    Managed support
    Optional monthly retainer, scoped and quoted per environment.

We don't audit environments we operate. See how we stay independent.

Talk deploymentsAll services