Baseline & maturity assessment
Review assets, access, patching, backups, policies, and practices. Structure the review around NIST CSF 2.0, with optional ISO 27001 mapping.
You receive: Executive report, gap analysis, and prioritized roadmap.
SECBase / Service portfolio
Understand the risks.
Build. Protect. Operate.
Practical cybersecurity and cloud infrastructure expertise for small and medium businesses. Start with a focused assessment, implement the priorities, and keep improving with ongoing management.
Remote consulting · U.S. and Brazil · Defined projects and monthly engagements
20+ years of IT & cybersecurity experience
Linux & FreeBSD expertise
Clear scope. Documented deliverables.
01 / Cybersecurity assessments
Know your risks. Set the priorities.
A focused review of your environment, with recommendations tied to business impact.
Vulnerability assessment & penetration testing
Identify weaknesses in agreed networks, servers, and web applications. Penetration testing is a separately scoped engagement with written authorization.
You receive: Validated findings, remediation guidance, and agreed retesting.
Cloud, Linux & FreeBSD security review
Review permissions, public exposure, private networks, SSH, firewall rules, services, logging, and operating system maintenance.
You receive: Configuration findings and a server/cloud hardening plan.
Remote workforce & developer security
Review personal devices, VPN access, local code copies, repository permissions, SSH keys, secrets, and database access.
You receive: Risk assessment and practical remote work controls.
Backup, recovery & incident readiness
Examine backup coverage, retention, restoration capability, incident escalation, and responsibilities.
You receive: Recovery gaps, agreed restore tests, and incident response recommendations.
Compliance & supplier readiness
Review agreed requirements, control evidence, vendor access, and shared responsibilities. Readiness work supports preparation; certification is a separate process.
You receive: Gap report, evidence checklist, and supplier risk register.
02 / Open-source security implementation
Turn recommendations into working controls.
Choose solutions around your requirements, compatibility, operating costs, and ability to maintain them.
Security monitoring & centralized logging
Deploy a suitable platform, such as Wazuh where appropriate, enroll supported systems, collect logs, and tune actionable alerts.
You receive: Monitoring platform, alert routing, and operating procedures.
Vulnerability & configuration management
Establish scanning, configuration checks, file integrity monitoring, remediation tracking, and verification.
You receive: Scan schedules, policies, and a remediation workflow.
Hardening, firewalls & segmentation
Apply agreed Linux/FreeBSD baselines and restrict traffic between public services, applications, databases, and administration.
You receive: Hardened systems, access rules, network diagram, and validation.
Secure access, identities & secrets
Implement VPN access, least privilege, supported MFA, account lifecycle procedures, and improved SSH key and credential handling.
You receive: Access matrix, onboarding/offboarding procedures, and administrator guide.
Secure file exchange & backup protection
Configure controlled file transfers, permissions, audit logs, encrypted backups, retention, and recovery procedures.
You receive: Documented services and successful agreed restoration tests.
Network detection & security automation
Deploy intrusion detection at agreed visibility points and automate suitable repeatable security checks.
You receive: Detection rules, alert workflow, and version-controlled automation.
03 / Cloud, Linux & FreeBSD deployment
Build a reliable foundation.
Defined projects for new infrastructure, migrations, and improvements—with documented handover.
Architecture, sizing & private networking
Design around workload, budget, availability, and security. Configure private networks, routing, and peering where supported.
You receive: Architecture diagram, resource plan, cost estimate, and connectivity tests.
Linux & FreeBSD server deployment
Provision supported server environments with secure administration, service configuration, monitoring, and maintenance procedures.
You receive: Configured servers, security baseline, and administration runbooks.
Web, database & application environments
Configure web servers, reverse proxies, TLS, database infrastructure, and appropriate separation of development, staging, and production.
You receive: Working services, deployment documentation, and recovery procedures.
Linux containers & FreeBSD jails
Deploy containers on Linux or isolated service environments using FreeBSD jails, according to workload and hosting compatibility.
You receive: Service isolation, resource configuration, and lifecycle procedures.
Migration & legacy modernization
Move agreed workloads between providers or from on-premises infrastructure, and replace unsupported systems.
You receive: Migration plan, rollback procedure, and post-migration validation.
Recovery architecture, automation & cost optimization
Design recovery arrangements, automate suitable provisioning tasks, and review sizing, storage, and unused resources.
You receive: Recovery runbooks, infrastructure definitions, and optimization recommendations.
04 / Ongoing cloud management
Keep systems maintained. Stay informed.
Recurring operations with defined assets, maintenance windows, support hours, and response targets.
Administration, patching & change management
Maintain Linux/FreeBSD systems, services, packages, users, and agreed configurations. Plan and verify maintenance changes.
You receive: Maintenance records, patch status, and outstanding exceptions.
Availability, performance & capacity monitoring
Monitor agreed service checks, resource usage, storage, and growth. Investigate operational issues.
You receive: Health reports, incident records, and capacity recommendations.
Backup operations & recovery exercises
Check backup jobs, investigate failures, and perform scheduled restoration or recovery exercises.
You receive: Backup status, recovery test results, and updated runbooks.
Security triage & vulnerability follow-up
Review agreed security alerts, escalate actionable events, schedule scans, and track remediation.
You receive: Incident summaries, vulnerability trends, and prioritized work queue.
Access, certificates & configuration oversight
Manage approved account changes, VPN and SSH access, certificate renewals, firewall rules, and configuration reviews.
You receive: Access records, renewal status, and change history.
Cost management & incident coordination
Review spending and resource usage, troubleshoot agreed infrastructure, and coordinate with providers and application teams.
You receive: Cost report, optimization proposals, and incident follow-up actions.
Advice that supports the work
Technical depth.
Business context.
Complement your engagement with security policies, developer security guidance, business continuity planning, employee awareness, customer security questionnaires, and fractional security or cloud advisory.
Already have an IT provider? SECBase can work alongside your MSP or internal team on specialist assessments, implementation, and infrastructure operations.
Ways to work together
Start where you need support.
SECBase Assess
A clear risk picture and prioritized improvement plan.
Defined project
SECBase Secure
Implementation of agreed security controls.
Project fee
SECBase Deploy
Cloud setup, Linux/FreeBSD deployment, or migration.
Project fee
SECBase Manage
Ongoing administration, monitoring, patching, and backup oversight.
Monthly subscription
SECBase Advise
Regular guidance on risks, infrastructure, and investment priorities.
Monthly retainer
Each proposal defines managed assets, deliverables, responsibilities, maintenance windows, support hours, response targets, and additional project work. Open-source solutions still require hosting, maintenance, and professional implementation.
Your next step
Tell us what you run.
We’ll define the right scope.
Share your infrastructure, main concerns, and whether you need a project or ongoing support. Work directly with Alexandre Vasconcelos to identify a practical starting point.
Discuss your project ↗contact@secbase.com.br
Alexandre Vasconcelos · SECBase
Remote service for small and medium businesses.