Skip to Content
Engagement type · High Security Add-on

Proactive keeps them running.
High Security keeps them safe.

The High Security Add-on adds host-based security monitoring, Common Vulnerabilities and Exposures (CVE) scanning, penetration testing, firewall audits, access auditing, and a monthly security report to the Linux servers listed under it.

▲ crafty-penguins / what-we-do / engagement-types / high-security
What it is

A security layer on top of Proactive.

The High Security Add-on sits on top of Proactive Managed Services. It adds host-based security monitoring, vulnerability scanning, penetration testing, firewall audits, access auditing, and a monthly security report to a named list of Linux servers. High Security comes with the Managed Detection and Response (MDR) Add-on.

The list can be every server in your proactive scope or a subset. Servers not on the list receive Proactive services only. All Proactive services on the covered servers continue unchanged.

The monthly security report includes extended security metrics and CVE results. Critical findings are escalated outside the reporting cycle.

Linux server security
An add-on, not a standalone service. Proactive runs underneath. High Security is a layer on top.
Proactive scope Proactive Managed Services

The High Security Add-on attaches to this scope and applies only to the servers listed under it.

Read about Proactive
Security layer High Security Add-on This add-on

Adds host-based Security Information and Event Management (SIEM) and Extended Detection and Response (XDR) coverage, CVE scanning, penetration testing, firewall audits, access auditing, and a monthly security report to the listed servers.

What's in it for you

Why teams add High Security

01

Visibility into what happens on each server

  • Security events on each covered server collected and correlated in one place
  • Changes to important files picked up
  • Rootkits, anomalies and intrusion attempts detected
  • History kept, so there's something to look at when you need it
Security monitoring
02

Known vulnerabilities found and triaged

  • Installed packages checked against published vulnerabilities
  • Findings triaged into your monthly security report
  • Critical findings escalated immediately
Vulnerability scanning
03

Your servers and their boundaries tested

  • Vulnerabilities, misconfigurations and human error found much sooner than a once-a-year test would
  • Covers your covered servers and the network boundaries directly around them
  • Firewall and load balancer rules reviewed for least privilege and kept documented
Penetration testing and firewall audits
04

Access you can account for

  • The stray account that doesn't belong, and accounts with more access than they need, found on your covered servers (root, sudo and SSH keys)
  • Security results in your monthly report, alongside your standard report
  • Critical findings escalated outside the reporting cycle
Access auditing and reporting
Who it is for

When this add-on makes sense

01
You need security reporting that supports your compliance posture.
02
You want your Linux servers watched for security events, intrusions, and file changes.
03
You want known vulnerabilities in your installed packages found and triaged.
04
You want to know who has root, sudo, and SSH key access on your servers.
Where it fits

What this add-on works with

Often paired 24/7 NOC Add-on

Very often paired with High Security. The NOC add-on gives your covered servers round-the-clock emergency coverage, with a 1-hour response commitment on critical issues.

Read about the 24/7 NOC Add-on
Included MDR Add-on

Included with High Security. A Security Operations Center (SOC) watches your covered Linux servers around the clock, so detection turns into response at any hour.

Read about the MDR Add-on
What's included

Always included, then what is optional.

Everything here applies to the servers listed under the add-on. All Proactive services on those servers continue unchanged.

Always
On every covered server
+Host-based SIEM and XDR coverage
+CVE vulnerability scanning
+Penetration testing
+Firewall and load balancer rule audits
+Access and authorization auditing
+Monthly security report, with critical findings escalated outside the reporting cycle
+The MDR Add-on, included with High Security
Optional
By request
+Host-based antivirus scanning, switched on or off per covered server by written request at no change in fee
+Scan mode, windows, and exclusions set with you, because on-access scanning can carry significant I/O and CPU cost on database, file, build, and high-traffic hosts
Proactive, then each layer on top

What each layer adds, side by side.

Service
Base Proactive Managed Services
Add-on + High Security Add-on MDR Add-on included
Add-ons + Both add-ons
Proactive Managed Services
Server, application and network monitoring
Included
Included
Included
Included
Every alert reviewed by an engineer
Included
Included
Included
Included
Patching inside your maintenance windows
Included
Included
Included
Included
Daily file-level and database backups
Included
Included
Included
Included
Quarterly engineer health checks
Included
Included
Included
Included
Managed server configurations
Included
Included
Included
Included
Business technology reviews and regular IT meetings
Included
Included
Included
Included
Monthly report
Included
Included
Included
Included
High Security Add-on
Host-based Security Information and Event Management (SIEM) and Extended Detection and Response (XDR) coverage
Not included
Included
Not included
Included
Common Vulnerabilities and Exposures (CVE) scanning every six hours
Not included
Included
Not included
Included
Security penetration testing
Not included
Included
Not included
Included
Firewall audits
Not included
Included
Not included
Included
Access and authorization auditing
Not included
Included
Not included
Included
Security section in your monthly report
Not included
Included
Not included
Included
Managed Detection and Response (MDR) Add-on: a Security Operations Center (SOC) hunting threats around the clock
Not included
Included
Not included
Included
Optional host-based antivirus scanning
Not included
Included
Not included
Included
24/7 NOC Add-on
An engineer on call around the clock for critical issues
Not included
Not included
Included
Included
One-hour initial response commitment
Not included
Not included
Included
Included
Automatic dispatch when a critical alert fires on servers you list
Not included
Not included
Included
Included
24/7 NOC phone line and portal request form
Not included
Not included
Included
Included
Emergency work at night, on weekends and on holidays, from your Reactive Flextime hours
Not included
Not included
Included
Included
Other engagements

Explore our other engagements.

There are a few different ways to work with us. Here are the other engagements you can explore.

The Crafty Penguins Way

How We Become Part of
Your Team

We don't just hand over a monitoring dashboard and disappear. Here's how we build a lasting partnership.

Step 01

Discovery Call

We learn your environment, pain points, and goals. No scripts, no sales pressure, just an honest conversation about what you need.

Step 02

Onboarding

A structured, practical onboarding process. We set up the services you chose, deploy monitoring where they include it, and tune alert thresholds with you through the first month.

Step 03

Your Services Begin

Whichever services you chose go live, delivered by engineers who already know your systems. From day one, the work keeps your infrastructure healthy and improving.

Step 04

Long-Term Partnership

We become an extension of your team. Strategic input, roadmap planning, and continuous improvement, not just keeping the lights on.

Start the conversation

Talk to us about the High Security Add-on.

Let's discuss how we can help support, grow, and optimize your Linux infrastructure, done right the first time.