Introduction to BlueCanvas tools · 003 Server security auditsecurity reportWordPress
Server security checks are checked based on settings, code, and logs.
Approximately 4 minutes to readBlueCanvas
The server is running fine, but how do I check the security settings?
You can receive a server security check that examines settings, code, and logs, and double-checks the candidates found by artificial intelligence with actual evidence. You will receive a report containing the basis and recommended actions for dangerous items and the order in which they should be replaced. Diagnosis takes precedence over inquiry orders, and settings changes are made only after customer approval.
Key takeaways
BlueCanvas server security inspection introduction video shows the process of examining settings, code, and logs together and rechecking the candidates found by artificial intelligence based on actual evidence in 48 seconds.
The results are received in a report that outlines which items are dangerous and what needs to be changed first, with evidence and recommended actions. There are a maximum of 30 inspection items depending on the plan.
Diagnosis takes precedence over inquiry commands, temporary access rights are revoked upon completion of inspection, and setting changes are made after customer approval.
Six scenes shown in the video
The video shows in order what the server security check checks and what it delivers. The explanation is Server security check introduction pageThis is a transcription of what was written in.
The server is normal, what about security?: It starts by asking if the server is running well and the security settings are okay.
Settings, Code, Logs: We look at the three together, and re-check the candidates found by artificial intelligence with actual evidence. Depending on your plan, up to 30 items will be checked.
Risk level and action sequence: We organize a report containing evidence and recommended actions to determine which items are dangerous and what needs to be changed first.
Inquiry-oriented inspection: Diagnosis takes priority over inquiry commands, and temporary access rights are revoked when inspection is completed. Setting changes are made after customer approval.
From one server: Light diagnosis starts at KRW 99,000 per server, excluding VAT.
counsel: We will consult on the scope of inspection appropriate for the server environment.
In what situations do you use it?
The server is running well, but you haven't checked what the current security settings are. The introductory page explains the inspection by dividing it into three perspectives.
aspect
Description of the introduction page
Review system settings
Checks sshd_config, sudoers, account/file permissions, firewall and service exposure status and records the basis for dangerous settings.
Review code and confidential information
Check web app source and configuration files for confidential information exposure, dangerous permissions, outdated CMS/plug-ins, and known vulnerability candidates.
Log/exposure review
Look through authentication logs, open ports, running services, and package versions to look for repeat failures, unnecessary exposure, or items that require updates.
The inspection scope is divided into plans. All prices are per server and exclude VAT.
flan
Check items
amount
light
Basic 10 items
99,000 won
standard
20 in-depth items, AI cross-examination and priorities
249,000 won
pro
Total 30 items
690,000 won
How to get started
From the SERVICE menu at the top of the site Server security auditGo to , read the introduction page, and then apply for a consultation. The procedure listed on the introduction page is four steps.
Consultation and scope confirmation: If you let us know your operating environment and desired plan, we will proceed after confirming the scope, schedule, and cost of the inspection.
Access permission settings: Here is a guide to issuing a temporary maintenance account. Temporary accounts will be revoked immediately upon completion of maintenance.
run check: Inquiry commands are checked with priority, and AI-assisted analysis results are checked again with actual settings and disclosure grounds.
Reports and Actions: We will reply with a PDF of the risk matrix and recommended action estimates. Action is optional.
If you are in a situation where you need to continuously check for problems and abnormalities rather than just once, Introduction to website and server controlPlease also take a look.
How to use and environment
Scope of support: Linux and Unix servers (Ubuntu, Debian, CentOS, RHEL, Amazon Linux, etc.) support all 30 items. Windows Server only performs some PowerShell-based checks when OpenSSH Server is turned on.
Managed services that cannot access the host, such as RDS, Aurora, and managed Redis, require separate agreement based on IAM keys.
We do not perform aggressive penetration testing such as brute force, executing exploits, or denial of service. We will not check systems that you do not own or have permission to manage.
Diagnostics prioritizes low-load queries.
Full video subtitles (6 scenes)
The server is normal, what about security?
The server is running well, but are the security settings okay? BlueCanvas confirms.
Settings, Code, Logs
We look at settings, code, and logs together, and double-check the candidates found by artificial intelligence with real evidence. Depending on your plan, up to 30 items will be checked.
Risk level and action sequence
Which items are dangerous and what should be changed first. The evidence and recommended actions are compiled into a report.
Inquiry-oriented, changes are made after approval
Diagnosis takes precedence over inquiry commands, and temporary access rights are revoked when the inspection is complete. Setting changes are made after customer approval.
From one server
Light diagnostics start at 99,000 won per unit, excluding VAT. Start with the range you need.
Inspection consultation
Check server security now. Please consult about inspection at BlueCanvas.
Frequently Asked Questions
Is it safe to give SSH access permission?
The recommended practice on the introduction page is to register your public key in a temporary check account with a limited duration. Inquiry commands are used first for diagnosis, and actions requiring changes to settings are performed after separate approval. Once the inspection is complete, you will be instructed to retrieve your temporary account and registered public key.
Are the results found by artificial intelligence included in the report?
Do not put it in as is. AI is used as an auxiliary tool to quickly organize candidates to check in settings and logs. In the final report, verifiable evidence such as actual server settings, version information, disclosed vulnerability information, and logs is recorded, and a human reviews the priority and possibility of false positives.
Do they actually fix the problems they find?
Action is optional. We provide estimates for each item along with the report, and you can select and request only the items you need. Actions to change settings are carried out only after customer approval, and the status before and after the change is recorded in a report.
Will server operations be affected during maintenance?
Diagnostics prioritizes verification of inquiry commands and low loads. For tasks that may cause a load, such as large-capacity log analysis or external scanning, the scope and time are discussed first.
Please consult the scope of server security inspection.
You can check the inspection area, scope by plan, and progress order on the BlueCanvas server security inspection introduction page.
