cobayka
ES EN
Request a proposal

Plan no. 001 — Server setup, development and maintenance

Servers installed and watched over — built to spec.

→ Request a proposal

§01 — From zero to production

Built up in layers, until it's running.

System, services and access hardened — ready to work, not a “hello world”.

§02 — Custom development

We build it piece by piece.

Made for your case; no templates with the logo swapped.

0/4Modules · wired to spec

§03 — How it detects

Add-onBulwark

It scans the configuration and grades it.

The grade here is a sample; yours comes from your real server.

ASecurity grade A–F

§04 — Defence · what it blocks

Attacks stop themselves.

Rules that work on their own; the counter is just to give you an idea.

1,247Attempts blocked

§05 — Access by schedule

Add-onTimeGate

Opens and closes on its own, on schedule.

You set the hours: “8 to 8” is only an example.

08:00 → 20:00An example · whatever hours you set

§06 — Watched, up to date

Backups, usage and alerts — without hovering.

It warns you in time, with room to react.

From plan to production,
to the millimetre.

From lean servers to bespoke builds. Tell us about your project.

→ Request a proposal
Scroll

Spec — Services

What we actually do.

All made to measure, no fixed catalogue. Each job is weighed on its own and only what's needed gets built.

A1

Setup

From zero to production: base system, the services the project calls for, encrypted traffic and access with the door already shut. It's tested under real load before it's called done, and left documented so it can be run without depending on whoever set it up. Already have a server? It gets reviewed and tuned without starting over.

A2

Custom development

When what you need doesn't exist, or exists half-built, it gets written: automations, integrations between systems, the pieces that join what you already have. Written for the actual case, with no spare modules, and tested before delivery. Handed over documented and maintainable, so someone else can pick it up tomorrow without guessing.

A3

Detection · Bulwark

Bulwark, an in-house add-on, goes over a server's configuration and grades it A to F, like a checkup. Each weak point comes explained (what it is, why it matters, how to fix it), not a bare number. It touches nothing on its own: it looks first, then you decide what to apply.

A4

Defence

Almost everything that hits a server is automated noise: password dictionaries, bots trying doors, bulk scans. It's cut off with rules that work on their own and block whoever keeps knocking, without living in the logs. The noise stays out, and it never reaches you.

A5

Access by schedule · TimeGate

TimeGate, another in-house add-on, opens and closes access (to the whole server or one area) on a schedule you set. Eight to eight, weekends only, or whatever window you need; it flips on schedule, with no one having to remember to open or close it.

A6

Monitoring

Once it's running, the server isn't left to fend for itself: automatic backups (one of them off the machine), an eye on usage, and alerts when something starts to slip. The point is to hear about it in time, with room to react. It stays looked after month to month, or documented for you to run yourself.

New

A new line is opening: managed hosting. Your own servers and servers for communities, set up and watched over, made to measure. In preparation — you can already reserve a spot, no commitment.

Infrastructure — Managed hosting

A server that's yours, tuned and watched over.

Two ways to have your own server without wrestling the technical side: a general-purpose one for your site, app or services, and one built for communities with many people connected at once. In both, setup, security and maintenance are included.

VPS Coming soon

Managed VPS

Your own isolated server, with resources you share with no one: to host a site, an app, a database or your project's internal services. It arrives installed, with encrypted traffic, access shut by default, automatic backups and an eye on usage. You don't need to know how to administer it: it's handed over working and documented, and it can stay looked after month to month.

  • Dedicated resources (CPU, memory and disk) just for you.
  • Encryption, firewall and hardened access from day one.
  • Automatic backups, one of them off the machine.
  • Usage monitoring and alerts when something starts to slip.
Reserve a spot →
GS Coming soon

Servers for gaming communities

A server built to hold many people connected at once and in real time, without falling over at the worst moment. Set up, protected against the automated noise of the internet and backed up daily, so the community plays and you're not glued to the panel. It fits the size you need and grows with you.

  • Ready for many simultaneous players in real time.
  • Isolated and protected against attacks and automated abuse.
  • Automatic backups of the world and the configuration.
  • Performance tuning and ongoing support if you want it.
Reserve a spot →

Both lines are in preparation. Reserving a spot costs nothing and commits you to nothing: we note you down, we talk through your case and, when it opens, you have a place. Write to us and we'll take a look.

Cases C1–C4 — Who it's for

If any of this sounds familiar, it's for you.

You don't need to know servers to spot your own case; seeing the problem is enough. The solution is built to measure.

C·01

Hosting falls short

The site or app is stuttering and shared hosting can't keep up. It needs its own server, with real control and without fighting strangers for resources.

C·02

It has to handle a lot of people

A project with many users at once, in real time, that can't afford to go down at the worst moment.

C·03

Move without surprises

Migrate what you already have to another provider or server without losing data or going offline along the way.

C·04

It works, but something's missing

A server that runs, but that lacks security, backups, or someone to watch over it and keep it up to date.

Phases 01–04 — How a job is handled

Every project is understood in full before a price is put on it.

There are no automatic quotes or off-the-shelf plans here. Every project goes through four steps before anything is touched, and the scope and price are put in writing before starting.

Request

You say what you need, where it stands and where it has to get to. Through the form or by email, with as much detail as you like.

Analysis

The case is studied in depth (requirements, risks, what already exists) to know what the project needs before giving a figure.

Tailored proposal

You get a proposal with the concrete scope and budget for that project, worked out for it rather than pulled off a catalogue.

Execution and delivery

What was agreed is built, tested and delivered working, with the documentation to run it afterwards.

Made to measure

What the case needs gets built, not a forced template.

No strings

No lock-in; what gets delivered is clear before starting.

Verifiable

What's delivered is tested and documented: it's shown to work.

Ongoing support

In production it can stay watched and looked after, if you want.

Verification — No smoke and mirrors

This very site runs on what it sells.

It was set up from zero, built to measure, and it's kept running and defended like any other job. It's not a showcase: it's the same work, in production and in plain sight.

Isolation

Encrypted and isolated

Traffic is encrypted and each service runs separate from the rest, with access cut down to the essential.

Backups

Backups and monitoring

Backups happen on their own and each service's usage is watched live, without hovering over it.

Blocking

Automatic defence

Intrusion attempts and bot scanning are detected and blocked on their own.

It's all published, and you can audit it right here, a little further down.

Demo — Live audit

How a server's security gets checked.

The auditor scores each setting by what it risks and sums it up as a grade from A to F. Flip a switch and watch it recompute on the spot. It's a demo model; the real one reads your actual server, not these three.

Security auditserver · demo
100/ 100

Hardened configuration.

  • SSH accessOKNo password; hardened with attempt limits.
  • FirewallOKOnly the essential ports stay open.
  • Database portOKThe database is not exposed to the internet.
  • TLS + HSTS + strict CSPOKEncrypted traffic and hardened headers.
  • Automatic IP banning and attempt limitsOKAutomatic blocking of scanning and brute force.
  • Automatic updatesOKPatched and up to date, no manual work.
  • Scheduled backupsOKDaily backups, verified.

Try weakening the configuration:

SSH
Firewall
DB port

Annex — Workshop sample

A real snippet of the code that gets written.

From Bulwark, an in-house add-on: a tamper-evident security log. Every line chains the previous line's hash (SHA-256), so if someone edits or deletes a past event the chain breaks and it shows. No libraries, just the JDK.

SecurityLog.java · BulwarkJava · JDK only
synchronized void append(String type, String message) {    long seq = lastSeq + 1;    String stamp = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss").format(new Date());    String msg = clean(message);    String t = clean(type);    // each event chains the previous one's hash    String hash = sha256(lastHash + "|" + seq + "|" + stamp + "|" + t + "|" + msg);    // …the line (seq, time, event, hash) is appended to the file    lastSeq = seq;    lastHash = hash;   // the link for the next one}

Queries — FAQ

What people ask before writing.

How much does it cost?

There's no fixed rate. Every project is analysed and quoted to measure after talking it through, based on what it really needs. Asking costs nothing, and neither does the proposal.

What if I'm not sure what I need?

Even better. The case is studied and we propose just what's needed, without overselling or charging for things that don't add value.

How long does it take?

It depends on the scope. Before starting, a realistic timeline is agreed in writing, counting the testing and delivery, not just the development.

Can you start from a server I already have?

Yes. What already exists can be reviewed, secured, maintained or migrated. There's no need to start from scratch.

Is there a lock-in?

No. No lock-in or strings: the scope is agreed up front and it's clear what's delivered. If one day you want to run it yourself, it's documented for exactly that.

What happens after delivery?

It's handed over working, with access transferred and the documentation to run it yourself. The first few days, whatever needs adjusting gets adjusted; and if you'd rather not keep an eye on it, it stays watched over for a monthly fee.

Stamp — Contact

Tell us about your project and get a concrete quote.

Describe what you need and where you stand. Each case is studied and answered with a realistic proposal. No commitment and no cost to ask.

  • Name and email
  • Type of service
  • Rough budget
  • Timeline
  • Project description

What happens when you write:

  1. You tell me about the project and where you stand.
  2. I reply within 48 working hours with a concrete proposal, at no cost.
  3. If it fits, we get going.
Write by email See services

Form

Fill in the form and a proposal for your case will reach you.

With what you tell us, the case is analysed and answered with a realistic proposal. Add as many details as you like.

Contact

By submitting you accept the processing of your data to handle your request and prepare a proposal. See the Privacy Policy.

Direct alternative: ariel@cobayka.es