OpenConcept always strives to provide the best level of support for our clients that is possible. OpenConcept can provide secure, up-to-date, and reliable monitoring and updating of your Drupal site. Our enhanced security clients that subscribe to this support agreement are hosted on a specially designed server that can give them peace of mind, no matter what their security concerns are. Common reasons for requesting enhanced security hosting include: clients from the health care sector, clients that house sensitive user data online, and clients that believe they may be targeted by hackers. 

Drupal is a software program and the Internet is a hostile environment, so security is something that must be taken seriously with any content management system. Security patches are provided as part of Standard website support. OpenConcept will apply patches only after the patch has been fully tested and proven reliable and effective in its performance. 

The following additional features are included as part of our enhanced package:

• SSH and HTTPS access only. No unencrypted access to server.
• AES-encryped root filesystem. 
• Firewall that restricts services that can run. 
• Network security features, using TCP/IP hardening. 
• Apache web server DoS protection (using mod_evasive)
• Suhosin PHP hardening
• OSSEC host-based, proactive, intrusion detection system that can respond to patterns of hacking behaviour and lock out attackers (uses OSSEC)

The following are included as part of our standard package:

• Security Updates - Applied within 2 days of release
• Monitoring unsupported and revoked modules as required
• Configure AWStats or Google Analytics (viewing traffic)
• Configure Nagios (server load and response monitoring)
• Backup Configuration/Testing (disaster recovery)
  • Drupal DB backups – kept for one week, on rotation
  • Drupal files backups – kept for one week, on rotation
• Offsite backups - monthly snapshots
• Cron script - runs 10x per day
• Server disk space - 1GB
• Bandwidth - 5GB
• Uptime - 99.9%

Cost
Please contact an OpenConcept representative for our current prices. An audit of client website may be required prior to initiation of service