Home Network Access Hardening

My home network needs a focused security overhaul with one clear objective: stop any kind of unauthorized access before it starts. The setup is typical—consumer-grade Wi-Fi router, a pair of laptops, several smart-home gadgets, and a small NAS—yet I want enterprise-style protection without enterprise complexity.

Here’s what has to happen:
• Assess the current network configuration and pinpoint every open door, from router firmware gaps to weak wireless encryption.
• Recommend and, where possible, apply hardening measures such as stronger firewall rules, VLAN or guest-network separation, secure remote-access alternatives, and fully patched firmware.
• Introduce lightweight monitoring or intrusion-prevention that fits a home budget and hardware.
• Deliver a concise report that lists each change, residual risk, and simple maintenance steps I can follow.

Acceptance criteria
1. External scans (e.g., Nmap) show only intended ports.
2. Wi-Fi is locked down with WPA3 or the strongest option supported.
3. No default or weak credentials remain anywhere on the network.
4. Final report received, written in clear language I can reference later.

All work will be done remotely; common tools such as Kali Linux, Wireshark, Open-VPN, or OpenWRT are welcome as long as they suit a home environment. If additional threat-detection features make sense later, I’m open to hearing about them, but the immediate milestone is preventing unauthorized access.

When you respond, let me know the toolset you prefer and an estimated time frame to complete the tasks above.