Is My SaaS Secure?

3 pointsby campervanshá 2 anos5 comments

So there's a lot on security out there. But running a SaaS, is there a particular vector at risk?

I currently regularly upgrade packages, and servers, run a firewall (UFW), have SSH only server access, and shortly adding Snort as an IPS and run code analysis on each PR.

But rank order where's the risk and where should the focus be?

5 comments

vmoorehá 2 anos

Set SSH to use a different port if you're paranoid[0]

[0] https://linuxiac.com/ssh-to-port-other-than-22/

cranberryturkeyhá 2 anos

i would also install fail2ban, had i known about this back in 2017 my 33 btc wouldn't have been stolen.

campervanshá 2 anos

man that's a hit!

Lesson learnt, adding fail2ban

cranberryturkeyhá 2 anos

yup. i only invested around 20k over the years, then just hodled to 2.2m

campervanshá 2 anos

All's well that ends well :)