Is My SaaS Secure?

[campervans]

So there's a lot on security out there. But running a SaaS, is there a particular vector at risk?

I currently regularly upgrade packages, and servers, run a firewall (UFW), have SSH only server access, and shortly adding Snort as an IPS and run code analysis on each PR.

But rank order where's the risk and where should the focus be?

[vmoore]

Set SSH to use a different port if you're paranoid[0]

[0] https://linuxiac.com/ssh-to-port-other-than-22/

[cranberryturkey]

i would also install fail2ban, had i known about this back in 2017 my 33 btc wouldn't have been stolen.

[campervans]

man that's a hit!

Lesson learnt, adding fail2ban

[cranberryturkey]

yup. i only invested around 20k over the years, then just hodled to 2.2m

[campervans]

All's well that ends well :)