Cloud security

Cloud security basics, explained

Securing a cloud server is a shared job. Here is what your provider secures, what is left to you, and the areas to cover: access, network, data, updates and logging.

Read the guideSee cloud hosting

6 topics and a quick FAQ

The shared responsibility model

Cloud and server security is split between your provider and you. The provider secures the physical data centre, the network hardware and the virtualisation layer underneath your server.

You secure what runs on top of that: the operating system, any software you install, your user accounts and the data you store. On a managed plan, such as shared or WordPress hosting, Cloudoora handles more of that layer for you; on a VPS or dedicated server, more of it is yours.

Key points

  • Provider secures the hardware and network
  • You secure the OS, apps, accounts and data
  • A managed plan covers more on your behalf

Access control

Most break-ins start with weak access, not clever code. Use SSH keys instead of passwords to log in to a VPS or dedicated server, and give each person or script only the access it needs, not full admin rights by default.

Turn on two-factor authentication wherever it is offered, including on your hosting account.

Key points

  • Use SSH keys, not passwords, for server logins
  • Give each account only the access it needs
  • Turn on two-factor authentication where it is offered

Network security

On a VPS or dedicated server, set firewall rules that close every port you are not using, and restrict access to management ports such as SSH to the addresses that need it.

If your server supports a private network, use it for traffic between your own servers instead of routing it over the public internet.

Key points

  • Close ports you are not using
  • Restrict management ports to trusted addresses
  • Keep server-to-server traffic off the public internet where you can

Data protection

Encrypt data moving between your visitors and your server with SSL. Cloudoora includes free SSL on Premium Shared, WordPress and Turbo-Boosted hosting plans.

Keep working backups too: Premium Shared hosting includes 3-layer backups, and Droplets can use snapshots to restore a whole server if something goes wrong.

Key points

  • Free SSL on Premium Shared, WordPress and Turbo-Boosted plans
  • 3-layer backups on Premium Shared hosting
  • Snapshots can restore a whole droplet
Backup and snapshot strategies

Updates and patching

Outdated software is one of the most common ways a server gets compromised. Update the operating system and any applications you run on a regular schedule, not just when something breaks.

If you run WordPress, keep the core, themes and plugins current, and remove any you no longer use.

Key points

  • Update the OS and apps on a regular schedule
  • Patch promptly after a security release
  • Remove software you no longer use

Logging

Keep your server's access and error logs, and check them after anything unusual, such as a sudden traffic spike or a failed deployment. On shared and WordPress hosting, cPanel keeps these logs for you.

On a VPS or dedicated server, keeping and reviewing logs is your responsibility.

Key points

  • Check logs after anything unusual
  • cPanel keeps logs on shared and WordPress hosting
  • You manage logs yourself on a VPS or dedicated server

Where this applies

Apply these ideas to the service you run.

Cloud hosting

Websites on cloud infrastructure. Your site, passwords and plugins are yours to secure. Cloud hosting

Droplets

Cloud servers with snapshots, for workloads that need more control. Droplets

VPS hosting

Your own virtual server, where access, network and updates are yours to secure. VPS hosting

Related guides

Go deeper on each area

FAQ

Cloud security questions

What is the shared responsibility model?

It splits security between your provider, who secures the physical infrastructure and network, and you, who secures your operating system, applications, accounts and data.

Should I use a password or an SSH key for my server?

An SSH key. It is much harder to guess or brute-force than a password, and it is the standard way to log in to a VPS or dedicated server.

Does Cloudoora provide free SSL?

Yes, on Premium Shared, WordPress and Turbo-Boosted hosting plans. SSL encrypts data moving between your visitors and your server.

What backup options do I have?

Premium Shared hosting includes 3-layer backups with extra backup storage by plan. Droplets can use snapshots to capture and restore a whole server.

How do I secure a WordPress site?

Keep WordPress, themes and plugins updated, use strong unique passwords and SSL, and remove plugins you no longer use.

Can I add extra protection to my domain?

Cloudoora domains can connect to Cloudflare, which adds a layer such as a CDN or reverse proxy in front of your site.

Keep your Cloudoora service secure.

Free SSL on eligible plans, backups on Premium Shared hosting, and snapshots on droplets.

See cloud hostingAsk our team