Practical security for servers, automations and business apps
Most growing businesses run on systems that were set up quickly and never reviewed: a VPS someone configured years ago, webhooks that accept anything sent to them, scripts with keys pasted into the code, a database reachable from the internet. STYD reviews them read-only first, shows you what is actually there — with the evidence — and changes nothing without your written approval.
The systems your business actually runs on
Servers and VPS
Linux servers running web apps, Docker, databases or automation tools.
Odoo
Self-hosted Odoo and the server underneath it.
Automations
Make, n8n, Google Apps Script and the webhooks that trigger them.
Websites and web apps
Custom apps and their API routes, including apps built quickly with AI coding tools.
Databases
PostgreSQL and MySQL: who can reach them, and with which accounts.
Code repositories
Your code, its Git history, and what deploys it to production.
Four ways to start
Linux VPS Security Audit & Hardening
Audit from $350 · Audit + hardening from $750
A read-only audit of ports, SSH, firewall, users, scheduled jobs, Docker, exposed files and malware indicators, with optional hardening applied only with your approval.
See the serviceVPS Malware & Crypto-Miner Cleanup
From $500
High CPU, unknown processes or an abuse warning: evidence first, then cleanup, then an honest recommendation — including a rebuild when cleanup is not enough.
See the serviceApplication, Automation & Repository Security Audit
From $850
A read-only review of your apps, code and automations: who can call them, where the credentials live, and what can write to production.
See the serviceIndependent Build Verification
From $1,900 per review
An independent written assessment of a system being built — ending in proceed, proceed with conditions, or rework before continuing.
See the serviceLook first. Change only with approval.
- 1Read-only review. Access is agreed with you and used only to look. Nothing is changed, restarted or deleted.
- 2Evidence-based report. Each finding gets a severity, the evidence behind it, and what remains uncertain. Concerns that cannot be confirmed are labelled as such — or removed.
- 3Approved fixes. Changes happen only after you approve them in writing, with a backup or restore point confirmed first.
- 4Optional monitoring. Once a server is stable, alerts or a recurring review can keep watch — quoted on request.
What a review can and cannot do
- No server, app or automation can be guaranteed 100% secure, and nobody should promise you otherwise. What a review can do is show you the risks that are really there — with evidence, not guesses — close the dangerous ones carefully, and tell you plainly what remains.
- STYD is not a cyber-security firm, and these services are not penetration tests. The work is practical: configuration, access, credentials, exposure and code review of the systems a business runs on.
Frequently asked questions
Is this a penetration test?
No. A penetration test actively attacks a system. These services are read-only reviews of configuration, code and access, followed by approved fixes. No exploit is attempted.
Will you change anything on our systems?
Not during a review. Changes happen only in a separate hardening or cleanup stage, after you approve them in writing and a backup or restore point is confirmed.
What access do you need?
The minimum needed to look, agreed with whoever administers the system. Secret values are never copied into the report — only where they are stored.
Where should we start?
Worried about a server: the VPS audit. A server already behaving strangely: the malware cleanup. Risk in code, scripts and webhooks: the application and automation audit. A system being built for you: independent build verification.
Can you guarantee we will be secure afterwards?
No — nobody honestly can. The work reduces common and serious risks, and the report states clearly what was checked, what was fixed, and what remains.
Not sure what is exposed?
Tell us what your business runs on, and we'll suggest the smallest useful review to start with.