I rescued a hacked production server, migrated it, and hardened it end to end — with zero data loss.

A production site was compromised by malware exfiltrating data to external servers. I detected and removed it within hours, verified the system was clean, rotated all credentials, blocked the attackers at the firewall, and migrated the full Directus + Next.js site to a secure new server.

Then I hardened it: iptables firewall (default-DROP), Fail2ban, auto-updates, a 3-tier backup system, and hourly automated security monitoring.

Result: threat removed in hours, no data loss, server clean and continuously monitored, hosting cost cut ~$230/year, client fully owns everything.

This shows I don't just build systems — I keep them alive and secure under real attack.