Mission statement:
To make your business grow on secure grounds.
Philosophy:
Open source, agile oriented development, full disclosure, in depth audit process and security by design.
Open source is a development method for software that harnesses the power of distributed peer review and transparency of process. The promise of open source is better quality, higher reliability, more flexibility, lower cost, and an end to predatory vendor lock-in. - The Open Source Initiative
Technologies:
Notable software we use and strongly suggest.
Operating System
Workstations: Mac OS X, Ubuntu Linux
Backup
Bacula for enterprise level backup system with strong authentication and TLS encryption ensure every bit of data is securely transfered and kept on redondant storage device. To backup MySQL using InnoDB database we rely on FreeBSD file system snapshot and shell scripting.
Mailing systems can be quite complicated and a great source of security problem. To avoid misconfiguration and design error, system administrator has to understand the software architecture and finest details. For those reason we have chosen Postfix and Dovecot since they both have great simplistic modular architecture and been design with security as their primary concern.
DNS
We use NLnet Labs's NSD authoritative name server and Unbound recursive name server for their brillant architecture, extreme performance and remarkable security history.
Security
OSSEC is a comprehensive and extremely powerfull host intrusion detection/prevention system that can prevent intrusion by interacting with a firewall. For this purpose we use OpenBSD's PF (Packet Filter). The later is extremely flexible and can compete with any high-end firewall such has PIX/ASA. All management is done with the ultimately secure OpenSSH service.
Monitoring
To ensure everything run smoothly and be alerted if something go wrong we use Nagios. Nagios is an extremely flexible and cost-effective monitoring solution. Any kind of test can be easily implemented and alerts can be sent in a very efficient way (dealing with variable support timesheet, variable SLA, different alert importance (email/page/SMS)).
When it come to provision and deep analysis, we use Munin to graph each part of our systems. From firewall stats to hard drive temperature, anything can be graph in a flash with this tool.
