Security Suite - Harden + Watch, Done For You

Reality check

Why the "I'll do it myself" plan keeps failing

Attacks on home broadband are automated and AI-driven: hundreds of thousands of probe hits per day, a one-day window between a vulnerability and its exploitation, and routers, IoT boxes and desktops all in the crosshairs. And now autonomous agents spin up containers, open ports, run tasks, then vanish. The guides tell you to open a terminal and read sysctl values. Most people never finish. We finish, and we leave eyes on the machine.

One package. Everything in.

Harden (sec-toolkit) + watch (nomad), set up and proven for you

What you get

Full read-only audit: firewall, AppArmor, kernel settings, updates, listening ports, SSH exposure, tunnel ingress.
Hardening applied for you: firewall rules, services off the network, auto-updates, kernel hardening, SSH posture.
Agent monitoring set up (nomad): drift watch over Docker, systemd and processes, so new containers, services and spawned processes get flagged.
Alerts configured (optional Telegram), so surprise activity reaches you, not just the log.
Before/after proof from verify, so you can see it actually changed.
A system snapshot before any change (timeshift). Restore possible in minutes.

Who it is for

A single Linux machine you care about, desktop or server.
You want it done and proven, not a 40-page guide you never get around to.
You are fine with the free tools existing; you are paying for the work and the peace of mind.

How it works

One machine. One pass. Proof at the end.

You buy the suite

PayPal checkout, $69 one-time. After you buy, email 45dgof8@gmail.com with your PayPal reference, the machine name, and (optionally) a sec-toolkit-check.log from ./sec-toolkit.sh check. No contract, no subscription, no account.

We audit and harden

Read-only audit first, then we apply every fix: firewall, AppArmor, sysctl, auto-updates, SSH posture. A timeshift snapshot is taken before anything changes.

We set up watching, then prove it

nomad drift monitoring is installed and configured (Docker, systemd, processes) with alerts. We finish with verify output showing the before/after, then hand it over.

The offer

One package. One machine. One price.

Free tools

The full hardening toolkit and the agent watchdog, free forever. Check, harden, verify, scan, watch. One file, no dependencies. Read the results yourself.

self-serve

Download the tools

Done for you

Security Suite

Audit + hardening + nomad monitoring setup + alerts + before/after proof, on one machine. Linux desktop or server. Want macOS or Windows? Tell us and we will take a look within 3 days.

$69

one-time, one machine

Buy via PayPal - $69

Prices in USD via PayPal. In the PayPal note, include the machine name. After payment, email 45dgof8@gmail.com with your reference. An annual recheck is available on request. Swiss clients can be invoiced in CHF on request.

What is covered, what is not

Clear scope is the contract

Included

One machine, one pass, fixed price, fixed scope.
Read-only audit before anything changes.
System snapshot before harden (timeshift). Restore possible in minutes.
Monitoring configured, but it runs on your machine; we set it up, we do not sit watching it.
Before/after proof via verify.

Not included

No 24/7 duty, no standing obligation of any kind. Each job is isolated.
No guarantee of absolute security. Hardening reduces risk; nothing removes it.
Linux is standard, desktop or server (Ubuntu, Pop!_OS, Debian). macOS and Windows on request: tell us you want it and we will take a look within 3 days, hands-on with a restore point first.
No scope creep: a second machine is a second job.

Terms, liability, data

Short version in plain words, not a wall of fine print

Liability. Security work reduces risk; it does not create a guarantee. Liability is limited to the amount paid for the job. We work conservatively and with backups, but you authorize changes to your own machine, and the result is your responsibility going forward.

No standing duty. Buying the suite creates no monitoring obligation, no retainer, and no duty to act between jobs. Monitoring we set up is yours; it does not mean we are watching for you.

Your data. Audit reports contain local system details. They are used only to deliver the job, kept briefly, and deleted after fulfillment unless you ask us to keep them. Data processing follows Swiss data protection law (nFADP/DSG). We never log your passwords, keys, or personal files.

Invoice. On request you receive a formal invoice with full vendor identification (45dgof8, Zurich, Switzerland) suitable for your records.

No legal advice. The above is a plain-language summary. Formal contract terms are sent with each engagement.

Contact. Questions or report submission: 45dgof8@gmail.com.