Website Security / Malware Expert

My site is currently operating with zero security layers—no SSL, firewall, IDS/IPS, or other safeguards are in place—so I need a specialist who can turn a blank slate into a hardened environment.

Here’s what I expect:
• A thorough vulnerability assessment and (if necessary) penetration testing that clearly explains every weakness you discover.
• Implementation of foundational controls: SSL/TLS, a properly configured firewall, secure headers, and a web application firewall (Cloudflare, ModSecurity, or a comparable option).
• Hardening the server and application stack with up-to-date patches, least-privilege access, and monitoring tools such as Fail2Ban or OSSEC.
• Clear documentation of every step taken and the exact configuration you apply so I can keep the system updated after the engagement.

I’m open on stack and tools—as long as they’re industry-standard (OWASP guidelines, Nessus, Metasploit, Burp Suite, etc.) and you can justify why each choice fits my site. After your work is complete, I should be able to verify the results with a clean vulnerability scan and see best-practice defenses running in production.