Cybersecurity
Platform Security Hardening
A security review and hardening of a web platform, covering logins, server setup, encryption and backups.
- Service
- Cybersecurity
- Technology
-
- Laravel
- Nginx
- SSL/TLS
- 2FA
- Backups
01
The challenge
A business running a customer facing web platform had never had its security reviewed. Admin accounts used passwords alone, the server had default settings and backups were not tested.
02
What we built
We reviewed the application and server, fixed the weak points we found and tightened the Nginx configuration. Admin logins now require two factor authentication, all traffic runs over SSL/TLS and sensitive settings were moved out of the code. Automated backups run on a schedule and are test restored.
03
The result
The platform now follows sound security practice, and the team knows it can recover if something goes wrong. Admin access is protected even if a password leaks.