CySec blog

How-to guides

Step-by-step instructions with ready commands: MikroTik, Linux, Windows, NAS, VPN, email security and more.

How to configure MikroTik for a small business: a secure baseline step by step

Update RouterOS, replace the admin user, close management services, set up the firewall and a guest network — with ready-to-use commands.

Read article

How to set up a WireGuard VPN on MikroTik for remote employees

Give staff secure access to office files and 1C from home — without opening RDP or Winbox to the internet.

Read article

Ubuntu server hardening: the first hour after installation

A practical checklist with commands: personal admin account, SSH keys, firewall, automatic security updates and fail2ban.

Read article

How to secure a Synology NAS: settings to change after installation

Step-by-step DSM settings: administrator accounts, 2FA, auto block, firewall, updates and immutable snapshots against ransomware.

Read article

SPF, DKIM and DMARC step by step: the DNS records your domain needs

Concrete DNS records for Microsoft 365 and Google Workspace, and a safe path from monitoring to blocking fake emails.

Read article

FortiGate secure baseline: protect the firewall itself

Personal admin accounts, trusted hosts, no management on WAN, lockout and firmware updates — the first settings for any FortiGate.

Read article

Encrypted Linux server backups with restic: step by step

Fast, encrypted, deduplicated backups to a NAS or cloud storage, with automatic retention and a restore test.

Read article

Secure nginx configuration: HTTPS, security headers and access limits

A practical checklist with ready-to-use snippets for a website or reverse proxy on nginx.

Read article

How to encrypt company laptops with BitLocker

A lost laptop should be an expense, not a data leak. Turn on BitLocker and store the recovery keys properly.

Read article

Email account hacked or password leaked: what to do, step by step

A calm checklist for the moment you suspect that a work account is compromised or its password appeared in a data breach.

Read article

Windows Server hardening with PowerShell: five quick wins

Disable SMBv1, stop the Print Spooler where it is not needed, enforce the firewall and secure Remote Desktop — with ready commands.

Read article

Docker security basics for small teams

Containers are not automatically secure. Published ports, root users and old images are the usual problems — here is how to fix them.

Read article

Proxmox VE security checklist: protect your virtualization host

One hypervisor runs many servers — if it falls, they all fall. 2FA, firewall, separate management network, backups and updates.

Read article

How to turn on MFA for the whole company in Microsoft 365

Security Defaults give every Microsoft 365 user multi-factor authentication in a few clicks. Step by step, with tips for a smooth rollout.

Read article

Let's make your IT secure and predictable

Tell us about your infrastructure and goals. We'll get back to you within one business day with next steps.