Is My SaaS Secure?

So there's a lot on security out there. But running a SaaS, is there a particular vector at risk?

I currently regularly upgrade packages, and servers, run a firewall (UFW), have SSH only server access, and shortly adding Snort as an IPS and run code analysis on each PR.

But rank order where's the risk and where should the focus be?

5 comments

[ 4.8 ms ] story [ 28.3 ms ] thread

cranberryturkey 2y ago ↗

i would also install fail2ban, had i known about this back in 2017 my 33 btc wouldn't have been stolen.

campervans 2y ago ↗

man that's a hit!

Lesson learnt, adding fail2ban

cranberryturkey 2y ago ↗

yup. i only invested around 20k over the years, then just hodled to 2.2m

campervans 2y ago ↗

All's well that ends well :)

vmoore 2y ago ↗

Set SSH to use a different port if you're paranoid[0]

[0] https://linuxiac.com/ssh-to-port-other-than-22/