About the work

A closer look.

Is anything on your server actually exposed? This is a server security review of one thing you run: a config file (nginx, sshd, docker-compose), a cloud or IAM policy, or a few lines describing the setup. You get back one page: the top fixes ranked by what is actually exploitable first, the exact setting, line, or command to change where I can give it, and what I could not judge from what you sent. Hand-read against a standard hardening checklist. No scanner output, no jargon, no 40-page report. Who it is for: you just put something on the internet, or moved to a new VPS, and want a second pair of eyes before it costs you. Scope: static config review. Not a pentest, not incident response, not compliance or legal advice. If what you send is not reviewable, I say so and nothing is owed.