Cloud and platforms

Security hardening and Cloudflare

Practical security: servers hidden behind Cloudflare, keys-only access, least-privilege roles and secrets kept out of code.

What we deliver

  • Cloudflare in front with strict TLS and the origin hidden
  • Firewalls, SSH keys only and automatic security updates
  • Least-privilege IAM and database authentication
  • Private admin tools behind a VPN
  • Secrets in a vault, never in git

Typical uses

  • A public site whose server IP cannot be found
  • A back office reachable only from the team's devices
  • An audit of an existing setup with a fix list

Have something in mind?

Tell us what you want to achieve. We reply with how we would approach it and what it would take.

Start a project