What our engineers handle on SSH hardening
This is the hands-on work, done by a person: the jobs the automatic tools cannot do for you.
- 1Switch to key-based login, disable passwords and restrict root login
- 2Limit users and source addresses, and add two-factor where it fits
- 3Manage authorised keys and remove old ones when staff leave
- 4Add rate limits and monitor failed logins
Problems we fix
Problem
The server logs thousands of failed SSH attempts
What we do
We disable password login, add rate limits and Fail2Ban and restrict the port where possible.
Problem
You locked yourself out after changing settings
What we do
We keep a second session open while testing and, if locked out, use the provider console to repair the configuration.
Problem
Former staff still have keys on the server
What we do
We audit all authorised keys and users, remove old ones and set a process for new joiners and leavers.
Automatic tools, and our team for the rest
RootManage is automatic server management with every tool in one place. The tools run by themselves on a schedule and report to one dashboard. Everything they cannot do, and every emergency, is handled by our engineers by hand.
Automatic
RootManage tools, running by themselves
- Server Health agent reports load, disk use and failed login attempts to your dashboard.
- Guard watches traffic for abnormal spikes and lets us block or unblock addresses. It is not an internet DDoS scrubber.
- Uptime checks check the server every minute and email you when it stops answering, and again when it recovers.
Manual, by our engineers
Everything else, and every emergency
- Hands-on work. Fixes, tuning, migrations, upgrades and the other jobs listed above on this page.
- Emergency work. A hacked site, an outage or a failed update is handled by a person who investigates and fixes it, not by a script.
- Things we do not automate. Anything the tools do not cover is done by hand, over SSH, WHM or RDP, on a login you can remove at any time.
The tools are optional, run on Linux servers and are installed by you with one command each. Every job our team does is recorded as a task in your dashboard with the details, and you get an email when it is updated.
How it works
- 1
Sign up
Create an account, choose a plan and add the server you want managed.
- 2
Install the tools
Run one command per tool. They then work by themselves and report to your dashboard. For hands-on work you give us a login you can remove at any time.
- 3
Automatic, with people behind it
The tools watch, scan and back up automatically and alert you. Our engineers do the rest by hand and handle every emergency, and you follow each task in your dashboard.
Questions about SSH hardening
Should I change the SSH port?
It reduces noise in the logs but is not security by itself. Key-only login and rate limits matter more. We can do all of it.
Can you set up a jump host or VPN?
Yes. Putting SSH behind a VPN or bastion host removes it from the public internet.
What does it cost to have SSH hardening managed?
Managed plans start at ₹1,999 a month for one server, and SSH hardening is managed as part of the server. The pricing page lists what each plan includes. If a server is already infected, the emergency cleanup is a one-time ₹9,000 job.