All insights
Security 9 min read
The 12-point server hardening checklist we apply to every VPS
From SSH keys to kernel parameters — the baseline security configuration every production server deserves.
IA
InfraAlly Admin
September 15, 2026
A fresh VPS is exposed to automated attacks within minutes of getting an IP address. This is the baseline we apply before any application is deployed.
Access
- Disable password authentication — SSH keys only
- Disable root login and use a sudo user
- Move SSH behind a firewall allow-list or VPN
- Enforce MFA for control panels such as Plesk
Network
- Default-deny firewall with only required ports open
- Rate-limit and ban brute-force attempts with Fail2ban or CrowdSec
- Put a WAF in front of every web application
System
- Enable unattended security updates
- Apply CIS benchmark kernel and sysctl settings
- Run services with least privilege and separate users
Recovery
- Automated, encrypted, off-site backups — tested monthly
- Centralized logging and alerting so you know before your customers do
Security is a process, not a product. Our managed VPS plans include all twelve — continuously monitored.