# Managed Linux servers. Every change checked.

Source: https://vetosec.at/en/servers/linux-betreuung/

We keep your Linux servers current and secure. Nothing happens without a test and approval. Everything is recorded.

- **Approval** before every change
- **Log** cannot be altered
- **Fixed price** per month

## What you get

- **Updates without surprises**: First a dry run, then approval, then the update. The same on every server.
- [**Problems spotted early**](https://vetosec.at/en/services/monitoring/): We watch every server. An engineer looks at every important alert.
- [**Everything traceable**](https://vetosec.at/en/compliance/nis2/): Who changed what, when and why. The log cannot be faked. Good for NIS2 and ISO 27001.
- [**Security stays high**](https://vetosec.at/en/servers/linux-haertung/): We check regularly that every server is still as secure as on day one.

## How an update runs.

- 08:52: **Hole found.** Six servers affected.
- 08:53: **Dry run.** Nothing changed yet.
- 09:14: **Approval.** An engineer approves.
- 09:15: **Update.** The same on all six servers.
- 09:16: **Logged.** Cannot be changed afterwards.

## The log

- Audit log: Every action goes into an immutable log: backups, alerts, approvals. Entries are chained and anchored with timestamps, so nothing can be changed afterwards.

## Price

**One fixed monthly price. After an assessment.**

Fixed monthly price after an assessment. With an in-house IT team we split the tasks in writing.

Send a request

## For IT leads

Technical details: RHEL · Rocky Linux · AlmaLinux · OpenSCAP · SELinux · Wazuh · firewalld

- **Configuration**: Servers, hardening and firewall rules as code, idempotent runbooks, dry run before every change.
- **Approval**: Role-based approval with a reason, optional four-eyes principle with your team.
- **Audit log**: Every entry carries the SHA-256 hash of the previous one, anchored with a timestamp, export as PDF.
- **Monitoring**: Agent per server, file integrity, vulnerabilities and sign-ins in the SIEM, alerts as triggers for runbooks.
- **Updates**: Security updates in maintenance windows, staggered across nodes, service checks afterwards.
- **Compliance**: Scheduled OpenSCAP scans, report per server with open items.
- **AI assistance**: Analysis of output and logs by a language model, execution only by the engineer.

## Further reading

- [**Monitoring einrichten reicht nicht: Warum Managed Monitoring besser ist**](https://vetosec.at/en/articles/cybersecurity/monitoring-ist-kein-set-and-forget/): Installing a monitoring tool is quick.
- [**KI findet Sicherheitslücken am Fließband: Was das für Ihre Server heißt**](https://vetosec.at/en/articles/cybersecurity/ki-findet-sicherheitsluecken/): New AI models find vulnerabilities faster than ever.
- [**Server absichern: Warum ein Standard-Server nicht mehr reicht**](https://vetosec.at/en/articles/cybersecurity/warum-standard-server-nicht-reicht/): A freshly installed server is set up for convenience.

## Frequently asked questions

### Do you work with our IT team?

Yes. Your team can approve changes too. Who does what is agreed in writing.

### Do we get access to everything?

To your servers, always. Plus reports, log, network plan and runbook. Our tools stay with us.

### Only Red Hat systems?

RHEL, Rocky Linux and AlmaLinux fit best. We look after Debian too.

### Who is this for?

For companies with about 30+ staff and anyone whose servers must not stop. With or without an in-house IT team.

## Related

- [Co-managed IT](https://vetosec.at/en/services/co-managed-it/): for in-house IT teams
- [Monitoring & SIEM](https://vetosec.at/en/services/monitoring/): part of operations
- [Servers & clusters](https://vetosec.at/en/servers/): Proxmox, Linux, high availability

## Linux server operations and RHEL support in Austria

vetosec runs RHEL, Rocky Linux and AlmaLinux with patching, monitoring, CIS hardening, approvals and a hash-chained audit log.

Updated: October 26, 2026

Provider: vetosec, Dipl.-Ing. Samuel Ziegler, BSc, Berndorf, Lower Austria, Austria. Contact: https://vetosec.at/en/contact/
