Secure multi-site hosting infrastructure
A production server that hosts business websites and internal platforms, with every site isolated from the others and every sensitive action logged. It now hosts a client site that we moved off a compromised host.
Hosting where one site can't affect another.
Per-site isolation
Every website runs under its own system user and its own database user, with file access restricted to its own folder.
Automatic SSL
Free certificates issued and renewed automatically for every hosted domain.
Protected admin access
Two-factor authentication on the hosting control panel, so a stolen password alone isn't enough.
Audit logging
Administrative commands and file changes in website and mail storage are recorded for review.
Transfer alerts
An automated check every few minutes emails an alert if any account moves an unusually large amount of data.
Backups before changes
Configuration and databases are backed up before every change, and every hosted site is checked afterwards.
Investigated, cleaned and migrated without guesswork.
A client's business website and email lived on a previous host that turned out to be compromised. We moved them onto this infrastructure in stages, verifying each step with evidence rather than assumptions.
- Copied site, database and mail data off the old host
- Found and quarantined malicious code, confirmed by scans
- Repaired damaged database records from the original dump
- Rebuilt and tested the site on a protected staging copy
- Moved the live site and mail to isolated hosting
- Verified it can't reach any other site on the server