Server management that keeps your websites fast, secure and online
We set up, secure, monitor and maintain your servers so you can run your business instead of your hosting. From a single VPS to a group of cloud servers, the work follows the same written routine.
- Linux VPS
- Cloud servers
- cPanel and aaPanel
- Backups
- Monitoring
Managed server services
Server setup and configuration
Ubuntu, Debian and AlmaLinux servers set up with Nginx or Apache, PHP, Node.js, MySQL, MariaDB or PostgreSQL. Older CentOS servers are maintained or moved to a supported system.
Security hardening
Firewalls, SSH keys, fail2ban, malware scanning, SSL certificates and regular security patches.
Monitoring and uptime
Uptime, load, memory, disk and service checks with alerts sent to our team.
Backups and disaster recovery
Automated backups stored away from the server, and restores that are actually tested.
Control panel administration
cPanel/WHM, aaPanel, Plesk and CyberPanel managed for you: domains, email, databases and DNS.
Performance tuning
Page and object caching, database tuning, PHP-FPM and web server settings, CDN and Cloudflare setup.
Cloud platforms
AWS, Google Cloud, DigitalOcean, Linode, Vultr, Contabo and Hetzner servers managed.
Email deliverability
SPF, DKIM and DMARC records, reverse DNS and mail server configuration so your emails reach the inbox.
What we monitor on your server
Monitoring is only useful if each alert has a known cause and a known first action. This is the standard set of checks.
| Check | What it catches | First action on an alert |
|---|---|---|
| HTTP and HTTPS response | Site down, error pages, slow responses | Check web server, PHP and database services, then recent changes |
| Ping and port checks | Server unreachable, a service stopped listening | Check the provider's status and console access, restart the service |
| CPU load and memory | Traffic spikes, runaway processes, memory leaks | Identify the process or site responsible and limit or fix it |
| Disk space and inodes | Logs, backups or mail filling the disk | Clear or rotate the cause before the disk is full |
| Database health | Slow queries, connection limits, crashed tables | Review the slow query log and tune or repair |
| SSL certificate expiry | Certificates that failed to renew | Renew and fix the renewal job |
| Backup job status | Backups that failed or stopped running | Rerun the job and fix the cause the same day |
| Mail queue and blocklists | Spam sent from a hacked script or mailbox | Stop the source, clear the queue, request delisting |
| Login and firewall logs | Brute-force attempts and unusual logins | Block the source and review access |
Patching and updates
Unpatched software is the most common way servers are compromised. Operating system security updates are applied on a schedule, using automatic security updates where that is safe and manual updates for anything that could affect your sites. Kernel updates need a reboot, which is planned for a quiet period and announced beforehand.
Application software is treated separately. PHP versions, database servers, the control panel, and CMS cores, themes and plugins each have their own update path. Major version changes, such as a new PHP release, are tested against your site on a copy first, because old code can break on a new version. Operating systems that have reached end of life no longer receive fixes, so they are scheduled for migration rather than patched.
Backups and restore tests
Decide what and how often
Files, databases, mailboxes and server configuration are listed. Databases that change every hour are backed up more often than static files.
Store copies off the server
Backups go to separate storage such as an object storage bucket or another provider, so a failed or hacked server does not take its backups with it.
Keep several restore points
Daily, weekly and monthly copies are retained, because some problems such as a hidden malware infection are only noticed later.
Encrypt and restrict access
Backup files are encrypted and the storage credentials are limited to writing backups, not deleting them.
Test the restore
A backup is restored to a separate location on a schedule and the site is opened from it. A backup that has never been restored is not yet proven.
Record the result
The date, size and outcome of each restore test are logged and shared with you.
Security hardening checklist
- SSH access by key only, with root password login disabled and the login restricted to named users
- A firewall such as UFW, firewalld or CSF that allows only the ports in use
- fail2ban or an equivalent to block repeated failed logins
- Automatic security updates for the operating system
- Separate system users and file permissions per website, so one hacked site cannot read another
- A web application firewall such as ModSecurity or Cloudflare rules in front of the sites
- TLS certificates on every domain with automatic renewal and HTTP redirected to HTTPS
- Database servers closed to the public internet unless a remote connection is required
- Two-factor authentication on the control panel and the cloud provider account
- Malware scanning of web files and removal of unused themes, plugins and old site copies
- Unused services and default accounts removed
Control panels we administer
A control panel does not replace server management. It adds its own updates, licences and security settings on top. These are the panels we work with most.
| Panel | Typical use | Points to know |
|---|---|---|
| cPanel and WHM | Hosting many websites and mailboxes, reseller hosting | Commercial licence, familiar to most site owners, built-in email, DNS and backup tools |
| aaPanel | A VPS running a few sites on Nginx or Apache | Free to use with optional paid plugins, lightweight, one-click PHP versions and SSL |
| Plesk | Agencies and businesses, including Windows servers | Commercial licence, runs on Linux and Windows, WordPress management tools |
| CyberPanel | WordPress sites that benefit from LiteSpeed caching | Built on OpenLiteSpeed, with a commercial LiteSpeed option |
| No panel | Single applications, Node.js or container setups | Fewer moving parts and a smaller attack surface, managed over SSH and configuration files |
Cloud servers on AWS, DigitalOcean and others
Cloud providers secure their data centres and network, and the customer is responsible for what runs on the server: the operating system, firewall rules, access keys and data. That division is where most cloud security incidents begin, so it is where we start.
On AWS this covers EC2 or Lightsail instances, security groups, IAM users with limited permissions, snapshots, S3 storage for backups and managed databases on RDS. On DigitalOcean, Linode, Vultr, Hetzner and Contabo it covers the server itself, the provider's firewall, snapshots and private networking. We also right-size servers: many sites pay for more capacity than they use, and others run short of memory that a small change would fix. Our administrators work from Kota, Rajasthan, India, and connect to servers in any region.
How we respond to an incident
Alert
A monitoring check fails, or you report a problem by WhatsApp, phone or email.
Triage
We confirm what is affected: one site, one service or the whole server, and whether data is at risk.
Restore service
The quickest safe fix comes first, such as restarting a service, freeing disk space, blocking an attack or switching to a backup.
Find the cause
Logs are reviewed to find why it happened, so the fix is permanent and not just a restart.
Report
You receive a short written summary: what happened, what was done and what will prevent a repeat.
How it works
Server audit
We review security, performance, backups and software versions, and send you the findings in order of urgency.
Fix and harden
Urgent issues are fixed first, then the hardening checklist and backup routine are put in place.
Monitor and maintain
Ongoing updates, monitoring and support continue on a monthly plan.
Frequently asked questions
What does a server management service include?
It covers the work needed to keep a server secure and available: initial hardening, operating system and software updates, monitoring with alerts, backups with restore tests, performance tuning, control panel administration and help when something breaks. It does not normally include developing your website or application. The exact scope, the number of servers and response arrangements are set out in the monthly plan.
Do you manage servers I already have with another provider?
Yes. We take over existing VPS, dedicated and cloud servers at any hosting provider. You keep the provider account and billing in your name and give us SSH or panel access. The first step is an audit of security, backups and software versions, because inherited servers often have outdated software or no working backup.
What is the difference between managed and unmanaged VPS hosting?
With an unmanaged VPS the provider supplies the virtual server, network and power, and everything inside it is your responsibility: operating system updates, firewall, backups, web server and fixes. With managed hosting the provider or a separate team does that work. Unmanaged servers are cheaper and more flexible, and a management service fills the gap if you do not have a system administrator.
How often should a server be backed up?
It depends on how much data you can afford to lose. A brochure website that changes monthly can be backed up daily. An online store or booking system should back up its database far more often, since every order is new data. Copies must be kept off the server, several restore points retained, and a restore tested regularly to confirm the backups work.
Can you fix a hacked or slow website?
Yes. For a hacked site we take a copy for investigation, remove malicious files and database entries, find and close the entry point such as an outdated plugin or weak password, change all credentials and restore from a clean backup where needed. For a slow site we check server resources, database queries, PHP settings and caching before recommending a larger server.
Which is better: cPanel, aaPanel or Plesk?
cPanel suits servers with many sites and mailboxes and users who already know it, but it needs a paid licence. aaPanel is free and light, a good fit for a VPS with a few sites. Plesk is a paid panel that also runs on Windows servers. For a single application, no panel at all is often simpler and more secure.
Do you offer one-time server setup without a monthly plan?
Yes. A one-time setup covers installing the operating system packages, web server, database, PHP or Node.js, SSL certificates, firewall, hardening and a backup job, and handing over documented access. After that the server is yours to run. Ongoing updates and monitoring are a separate monthly service that you can add later.
How do I know if my server is secure?
Check a few basics: is the operating system still supported and updated, is SSH limited to keys, is a firewall active, are backups stored elsewhere and tested, and are all sites on current software. A server audit answers these in detail and lists open ports, outdated packages, weak permissions and missing protections. No server is perfectly secure, so the aim is fewer openings and faster detection.
Related
Server migration (shifting)
Server migration services with a step-by-step checklist: move websites, databases and email to a new host with a tested cutover, DNS switch and rollback.
Learn moreWebsite developmentWebsite development
Website development company for custom business websites: design, copywriting, SEO setup and lead forms, with standard sites live in 3 working days.
Learn morePayment gateway integrationPayment gateway integration
Payment gateway integration for websites and apps: Stripe, Razorpay, PayPal, PayU and CCAvenue, with webhooks, refunds, subscriptions and sandbox testing.
Learn moreReady to start?
Tell us what you need and get a clear plan and price within 1 business day.