Is My SaaS Secure?

3 pointsby campervans2 lata temu5 comments

So there's a lot on security out there. But running a SaaS, is there a particular vector at risk?

I currently regularly upgrade packages, and servers, run a firewall (UFW), have SSH only server access, and shortly adding Snort as an IPS and run code analysis on each PR.

But rank order where's the risk and where should the focus be?

5 comments

vmoore2 lata temu

Set SSH to use a different port if you're paranoid[0]

[0] https://linuxiac.com/ssh-to-port-other-than-22/

cranberryturkey2 lata temu

i would also install fail2ban, had i known about this back in 2017 my 33 btc wouldn't have been stolen.

campervans2 lata temu

man that's a hit!

Lesson learnt, adding fail2ban

cranberryturkey2 lata temu

yup. i only invested around 20k over the years, then just hodled to 2.2m

campervans2 lata temu

All's well that ends well :)