How Do Webservers Stay Safe From Hackers?

This page summarizes the projects mentioned and recommended in the original post on /r/sysadmin

Our great sponsors
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • WorkOS - The modern identity platform for B2B SaaS
  • SaaSHub - Software Alternatives and Reviews
  • http-observatory

    Mozilla HTTP Observatory

  • This is a good guide to start, and has advanced options near the bottom such as Modsecurity: https://geekflare.com/apache-web-server-hardening-security/ This is good for advanced hardening if you want to go far with HTTP headers and browser-site behavior: https://observatory.mozilla.org/ This is an amazing tool for testing SSL suites and for SSL vulnerabilities: https://www.ssllabs.com/ssltest/

  • Caddy

    Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

  • I've started to use a web server called caddy. You should check it out; it's awesome. Configuration is so much simpler, and it has a lot of other advantages also! Built-in lets-encrypt handling -- you don't even have to do anything (other than setup DNS "A" and/or "AAAA" record!)

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts