Do you carry out penetration tests?

No. We do not carry out penetration tests or any tests from outside. We check the configuration and hardening of the systems, along with access, patch level, logging and backup.

What does the security audit cover?

Configuration and hardening of the operating system and services, access and permissions, patch level and known vulnerabilities, firewall and exposed services, logging and backup. For cloud accounts, also IAM, networking and storage. The exact scope is defined before we start.

What access do you need?

Usually read access to the systems, and a read-only role for cloud accounts. Credentials are exchanged only after the scope has been agreed.

How does this differ from the Linux server audit?

The Linux server audit is a defined assessment of individual Linux servers at a fixed starting price. The security audit covers larger environments with cloud accounts, networking and several systems; the price is stated in the quote.

How does this differ from a vulnerability scan?

The vulnerability scan checks agreed systems regularly or once with OpenVAS for known vulnerabilities and delivers a report. The security audit additionally reviews configuration, hardening and access by hand. New CVEs for the installed software are reported by CVE monitoring.

A written report with findings, risk ratings and prioritised actions. From the extended audit onwards, a closing meeting is included. Implementing the actions is not included and can be taken on by effort or within an operations contract.

Security audit for servers and IT infrastructure

We check the configuration, hardening, access and patch level of your servers, cloud accounts and networks and deliver a report with prioritised actions.

Configuration and hardening
Access and permissions
Patch level and vulnerabilities

Request a security audit View packages

Reviews

IT Beratung Service Consulting Soforthilfe

Companies worldwide trust WZ-IT

Read client reviews

Occasions

When a security audit makes sense

Servers that have grown over time and whose state nobody fully knows
Unclear access after a change of IT staff
Technical evidence for customers, insurers or auditors
Cloud infrastructure (AWS, Azure, GCP)
Container and Kubernetes environments
Self-operated web applications and APIs

What we check

Configuration and hardening
Check the operating system, services, SSH, TLS and firewall against established hardening guidance such as the CIS Benchmarks.
Access and permissions
Record and assess user accounts, SSH keys, administrator rights, MFA and orphaned access.
Patch level and vulnerabilities
Record installed versions, pending updates and known vulnerabilities (CVE) with authenticated scans and assess them.
Cloud configuration
Check AWS, Azure or Google Cloud accounts for misconfiguration in IAM, networking, storage and logging.
Network and application operation
Assess segmentation, firewall rules, exposed services, web server, reverse proxy and TLS settings based on their configuration.
Logging, backup and evidence
Check logging, backup and restore, and map the findings to requirements from the GDPR or BSI IT-Grundschutz.

Packages

Security audit packages

Basic audit

One system, patch level and baseline hardening. For a single Linux server: Server audit from €290 excl. VAT one-time

Price in the quote

1 system
Authenticated scan
Short report

Scope details

Patch level and known vulnerabilities
Baseline hardening of operating system and services
Access and administrator rights
Findings prioritised by risk
Questions by e-mail

Extended audit

Several systems, manual configuration review

Price in the quote

Up to 3 systems
Automated and manual
Detailed report

Scope details

All checks of the basic audit
Manual review against CIS Benchmarks
Firewall, TLS and exposed services
Logging and backup
Prioritised action plan
Closing meeting

Comprehensive audit

Servers, cloud and network together

Price in the quote

Scope as agreed
Servers, cloud and network
Management and technical report

Scope details

All checks of the extended audit
Cloud configuration (IAM, network, storage)
Mapping to GDPR and BSI IT-Grundschutz
Management and technical report
Dedicated contact

Which package fits?

We agree the scope in a free initial call. The price is then stated in the quote. Submit a request

Payment

Bank transfer

How we work

Review of configuration and hardening

We review the systems with agreed access: configuration, hardening, access, patch level, logging and backup. The reference is established guidance such as the CIS Benchmarks and BSI IT-Grundschutz.

Penetration tests, tests from outside and red team exercises are not part of the scope. You receive a report with prioritised findings and concrete actions.

What to expect

Assessment from an operations view
The same people run Linux servers, cloud environments and Proxmox clusters in day-to-day operations.
Automated and manual
Scans provide breadth; the manual configuration review puts the findings into context.
Clear report
Findings with a risk rating and concrete actions, prioritised by urgency.
One point of contact
One contact for questions during and after the audit.
Confidentiality
NDA on request. Credentials are exchanged only after the scope has been agreed.
Implementation after the audit
On request, we implement the actions, billed by effort or within an operations contract.

Frequently asked questions about the security audit

Scope, access and boundaries.

Reviews & projects

Client feedback and projects worldwide

Networking & Provisioning

WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.

Steve KirchnerManaging Director, nextGYM GmbH

View project

International

Built in Germany's Ruhr Valley. Running worldwide.

WZ-IT designs, develops and operates infrastructure and software for clients in Germany and internationally. We deliver projects remotely and continue supporting them in ongoing operations after go-live.