Catalog/Site quality/ Site security

Site security

Site security services: SSL/WAF/DDoS, hardening, auth, headers, backups and recovery.

39 services

SSL/TLS audit and setup$2,400SSL/TLS audit and setup: certificates, TLS 1.2/1.3, HSTS, fixing mixed content. Honestly — basic channel-encryption hygi
WAF setup$3,600WAF setup (Cloudflare/ModSecurity): attack filtering, OWASP rules for the site. Honestly — substantially reduces risk an
DDoS protection setup$3,000DDoS protection setup (CDN/provider): L3/L4 and L7 filtering, under-attack modes. Honestly — absorbs most typical attack
Rate limiting setup$1,800Rate limiting setup: limits on login/forms/API against brute force, spam, scraping. Honestly — greatly reduces mass abus
Bot management$3,000Bot management: distinguishing useful/harmful bots, challenge/block of harmful automation. Honestly — substantially redu
Vulnerability scanning$3,000Vulnerability scanning with third-party tools: known vulnerabilities, outdated components, a report. Honestly — finds th
Bug bounty program setup$3,600Bug bounty program setup: platform, scope, rules, rewards, triage process. Honestly — we set up the process, not the rew
Website hack recovery$6,000Website hack recovery: cleaning malware/backdoors, restoring from a copy, changing credentials. Honestly — the maximum t
Anti-scraping protection$2,400Anti-scraping protection: bot detection, limits, challenges, traps. Honestly — substantially hinders and raises the cost
Captcha integration$1,800Captcha integration (reCAPTCHA/hCaptcha/Turnstile): cutting off bots/spam on sensitive points. Honestly — reduces mass b
2FA / MFA implementation$3,6002FA/MFA implementation: a second factor (TOTP/passkey/SMS), backup codes, recovery. Honestly — sharply reduces hijacking
Passwordless authentication$4,000Passwordless authentication: passkeys/WebAuthn, magic links, OTP. Honestly — removes password risks but shifts trust to
OAuth flows setup$3,600OAuth flows setup: login via Google/Yandex/VK, etc., correct Authorization Code + PKCE, account linking. Honestly — conv
JWT setup$3,000JWT setup: signing, short access+refresh, rotation, revocation, storage. Honestly — NOT more secure than sessions by def
Session management hardening$2,400Session management hardening: HttpOnly/Secure/SameSite, ID regeneration, timeouts, log-out everywhere. Honestly — closes
CSRF protection$2,400CSRF protection: anti-CSRF tokens, SameSite cookies, origin verification. Honestly — closes a specific attack class (req
XSS protection$3,000XSS protection: context-aware encoding, sanitization, CSP, fixing what is found. Honestly — we substantially reduce risk
SQL injection prevention audit$3,600SQL injection prevention audit: finding, query parameterization, validation, DB privileges. Honestly — we close what is
Content Security Policy (CSP) implementation$3,000CSP implementation: a script/resource source policy, an XSS barrier, via report-only. Honestly — a strong reinforcement,
Subresource Integrity (SRI)$1,800Subresource Integrity (SRI): a hash check of included third-party files against substitution (CDN hack). Honestly — a na
HSTS preload$1,800HSTS preload: forced HTTPS without a downgrade, submission to the preload list. Honestly — strengthens transport, but pr
Security headers$2,400Security headers: X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Honestly — close clickja
HTTPOnly + Secure cookies$1,800HTTPOnly + Secure cookies: closing the cookie off from JS and http. Honestly — reduces session theft, but does not repla
Same-Site cookies$1,800Same-Site cookies: the SameSite attribute (Lax/Strict/None) against CSRF. Honestly — a substantial layer, but not full p
API authentication hardening$3,600API authentication hardening: tokens/scopes/lifetimes, permission checks on every request, rate limiting, secure secrets
Rate limiting per endpoint$2,400Rate limiting per endpoint: limits on login/recovery/API against brute-forcing and spam. Honestly — a layer against auto
Input validation hardening$3,000Input validation hardening: server-side check of type/length/format of all data. Honestly — client-side check is not sec
DLP software integration$5,000DLP software integration: control of sensitive-data leakage. Honestly — reduces risk, NOT a guarantee (insider/human fac
Antifraud integration$5,000Antifraud integration: detecting fake/stolen orders, bots, abuse. Honestly — reduces fraud, does NOT eliminate it (fraud
Honeypots setup$2,400Honeypots setup: hidden decoys against spam bots without a captcha for people. Honestly — this is detection/filtering of
WAF rules tuning$3,000WAF rules tuning: a filter of typical attacks in front of the site. Honestly — a WAF is a SHIELD over holes, not their e
Security event logging$2,400Security event logging: logins, admin actions, anomalies. Honestly — logs are VISIBILITY/forensics, not protection; usef
Web app vulnerability scan (no formal report)$3,600Web app vulnerability scan (no formal report): tools + manual review, a prioritized list of findings. Honestly — this is
Mirror sites$4,000Mirror sites: backup copies on other domains for availability. Honestly — increases AVAILABILITY, NOT protection against
Backup strategy + DR plan$4,000Backup strategy + DR plan: what/how/where to copy and how to recover. Honestly — the value is in a TESTED restore (an un
RTO / RPO definition$3,000RTO/RPO definition: within how long to recover and how much data loss is acceptable. Honestly — this is PLANNING of targ
Chaos engineering setup$6,000Chaos engineering setup: controlled failures to test resilience. Honestly — REVEALS weak spots, does not fix them (fixin
Token gating (Web3 access control)$6,000Token gating (Web3 access by token/NFT): opening content to token holders. Honestly — niche, only for genuine Web3 proje
Multi-sig wallet integration$7,000Multi-sig wallet integration: an operation requires several signatures (M-of-N). Honestly — REDUCES the risk of a single