Perne
Website and server protection: WAF, backups, 2FA: illustration 1
IT outsourcing and security

Website and server protection: WAF, backups, 2FA

We work as a team to set up the basic protection of your website and server: a WAF at the Cloudflare or Nginx level to filter suspicious requests, two-factor login to the admin panel and to the server, SSH access limits, and automatic backups with restore checks. We configure everything together with you and leave instructions on how to use it. Protection lowers risks but does not replace regular updates, so we show you right away what still needs upkeep.

from 28,000 ₸ (≈ $55) one-off

timeline: 3–7 working days

  • Setting up a WAF through Cloudflare or Nginx with rules against common attacks
  • Two-factor login to the site admin panel and the hosting panel
  • SSH keys instead of passwords, no root login and limited open ports

Order

Message on WhatsApp
TelegramCall

The service name is added to the message for you.

This is a starting price; we give the final amount before work starts. USD is approximate.

What is included

  • Setting up a WAF through Cloudflare or Nginx with rules against common attacks
  • Two-factor login to the site admin panel and the hosting panel
  • SSH keys instead of passwords, no root login and limited open ports
  • Automatic backups of the site and database, stored in a separate location
  • Checking a restore from a copy on a test environment
  • Basic setup of system updates and failure notifications
  • Instructions for you and a short walkthrough on a call

Who it is for

For owners of websites and small servers who want to close obvious gaps, set up backups and protect the admin login. It does not fit if you need full protection of a large infrastructure with round-the-clock duty: we discuss such tasks separately.

Not included

To avoid surprises, here is what the base price does not cover and what is discussed separately:

  • Around-the-clock monitoring and incident duty
  • Protection against attacks that need a separate audit or penetration test
  • Paid Cloudflare and hosting services if you need them beyond the free plan

FAQ

All accounts, keys and settings are created in your name or transferred to you when the work is done. We do not keep personal access for ourselves, and we hand over a list of everything we configured. Passwords are passed through a secure password manager, not in chat.

The price includes one round of fixes after handover: for example, adjusting WAF rules that block visitors or changing the backup schedule. New features and a move to another hosting are estimated and paid separately.

Usually 3 to 7 working days, depending on how many services need connecting and whether access is ready. We check restores from a copy separately, which takes time, but without it a backup is not considered ready.

Access to the hosting, the site panel and the server, a list of what needs protecting, and information about current backups. It helps to say where backups should be stored, how many days to keep them and who on your team should receive notifications.

That risk exists, so we first switch the rules on in observe mode and review the log for a few days. We fix false blocks by adding exceptions. If you use payment forms, we check them separately.

No. A WAF and two-factor login lower the risks, but a vulnerable CMS or plugin version stays vulnerable. We show you what to update and how, and offer an update schedule if you want help with upkeep.

During setup we restore a copy of the site and database on a test environment and check that pages and data open. We write the result into the instructions so you can repeat the check yourself. Backups are stored apart from the server.

You may also need

VPS setup and hardening

VPS setup and hardening

We configure a fresh VPS: users, key-based login, a firewall and updates. The server is ready for your site and protected from common attacks.

from 18,000 ₸ (≈ $36) one-off

Timeline: timeline: 1–3 working days

Automatic backups of your site and database

Automatic backups of your site and database

We set up regular copies of your site files and database to a separate storage. If something goes wrong, the data can be restored.

from 12,000 ₸ (≈ $24) one-off

Timeline: timeline: 1–3 working days

Website security audit

Website security audit

We check your website for vulnerabilities and misconfigurations and give you a report with a clear list of fixes.

from 25,000 ₸ (≈ $50) one-off

Timeline: timeline: 3–7 working days

Shall we discuss your project?

The product name and a link to this page are filled into the WhatsApp message for you.

Message on WhatsApp
TelegramCall

Or send a request

We will reply in the channel you choose: WhatsApp, Telegram, phone or email. Your contact is used only to reply.

Service
How to reply

from 28,000 ₸ (≈ $55) one-off

Message on WhatsAppTelegramCall