Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : looking for good security team

[babak54]

Hi,

my website has been hacked several times.I consulated a code expert
(php expert).he believes it is better to consulate with a security
team to protect me. how I can find a good security team.I have linux server(with plesk).I have 850k visitors per month.

[Srv24x7]

I think you need to review your server settings completely, What OS you are running, What version softwares you are running etc.. Is the control panel properly updated ? Firewall installed or not etc etc.

[UnixCabin]

Have no experience with them.... But (Steve) Rack911 got rave reviews and matter subject expert.

[ExpertWebHostNET]

I read many good reviews on Rack911 and unixy. good luck.

[cd/home]

Originally Posted by babak54

I have linux server(with plesk).I have 850k visitors per month.

If you can give more details as already stated we will be able to help point you in the right direction.

How much is your budget for this exactly?

Regards,

[ParagonHost]

Originally Posted by babak54

Hi,

my website has been hacked several times.I consulated a code expert
(php expert).he believes it is better to consulate with a security
team to protect me. how I can find a good security team.I have linux server(with plesk).I have 850k visitors per month.

Are you running a dedicated box?

Install some type of Plesk Firewall or search for plesk tools that will allow you to auto block brut force attacks

ShutDown SSH access / only when you need it turn up the Authentication option.

We have used the following company in the past many years ago and they seem to do a great job at maintaining our linux servers:

http://www.platinumservermanagement.com/

Cheers,

Dave

[JoshuaD]

ParagonHost, thank you for introducing Platinum Server Management to babak, I have heard many good things. If you would like a more personable and moldable security specialist, I would recommend hiring an individual.

[W1H-Lee]

PSM are good, in your case I would definately recomend Steve at Rack911 in the first instance, it seems you need more just general management at this point and Steve is your man.

[top hosting]

Originally Posted by babak54

Hi,

my website has been hacked several times.I consulated a code expert
(php expert).he believes it is better to consulate with a security
team to protect me. how I can find a good security team.I have linux server(with plesk).I have 850k visitors per month.

To prevent your site from hacker, do you have been ask to your hosting technical support? I think PHP expert is can't help your problem. Usually, every hosting company have been integrated with security features, such as backup file, recovery, prevent from hacker and cracker, and other. For this features, you must be spend of money, or you can upgrade your hosting plans.

[gregBS]

First of all you (or better, the team you hire) have to find the cause of the hacks and fix it immediately. In the long term a good security team should be able to offer you:

• server security audit, considerations and solutions - primarily linux update suggestions and firewall policies

• services security audit, considerations and solutions - for example: apache webserver (if you are using it), ssh, ftp, and basically all the other services that are publicly available

• application security audit, considerations and solutions - this is about your applications. normally it is better done by the person who developed your application.

• risk management - prepare a contingency plan, prepare a backup plan, etc. so that you stay online even in the case you get hacked.

[babak54]

Originally Posted by top hosting

To prevent your site from hacker, do you have been ask to your hosting technical support? I think PHP expert is can't help your problem. Usually, every hosting company have been integrated with security features, such as backup file, recovery, prevent from hacker and cracker, and other. For this features, you must be spend of money, or you can upgrade your hosting plans.

Thanks all

I moderate my website with 850k visitors lonely without having
technical consultant.unfortunately I encounter a security problem and I don`t know what to do exactly.my web developer doesn`t reply my emails and calls.96% of my traffic are on my vb
forum (Version 3.8.7)I am sure it doesn`t have problem...but 4%
of traffic are on other parts of my website that 8 years ago I hired one web developer to create for me.it is full dynamic.

someone checked my website.he believes there are so many vulerabilities that it doesn`t worth to patch them and it should
be better to hire new webdeveloper to create again...but I don`t
have time for this issue... bc I am very busy... other than moderating my website...

with this situation do you think my server manager can help me ?

[gregBS]

if the security issues are in your application then it should be fixed. if it is a bad piece of code then, well, you don't have many options.
a sysadmin cannot fix bugs in your code. if you don't have time to rewrite the apps then you maybe try hiring someone else

[babak54]

Originally Posted by gregBS

if the security issues are in your application then it should be fixed. if it is a bad piece of code then, well, you don't have many options.
a sysadmin cannot fix bugs in your code. if you don't have time to rewrite the apps then you maybe try hiring someone else

yes there are so many bugs that it needs to hire new web developer.
but bc i am very busy.. I have to close the sections of my website
temporarily.

my question is must not a good server manager protect any website in spite of so many bugs ?

[FrankLaszlo]

If the code is as bad as they say it is, you're basically trying to cover up severed leg with a bandaid. It just isn't going to fly.

You likely need to hire someone to go through the code and conduct a proper security audit on it. Once thats complete, you can then focus on ensuring the security layers on top of the application are up to snuff. Things like a good firewall, mod_security, PHP settings, etc.

[gregBS]

not really. because he cannot protect it if you require the application and inherently, require backdoors he cannot close.