We look at each server, when possible, from the inside and the outside.
From the outside, we monitor web pages and look for certain types of changes typically indicative of the presence of malware.
From the inside, webmasters may install monitoring agents that provide private alerts—and we can detect many types of hacks or exploits that might go undetected from the outside. We can help with the installation process.
This includes looking at multiple services that might be running inside a server, such as web (obviously), databases, and file systems. When we’re monitoring cloud servers, we work with CloudKick to provide these extra monitoring agents.
Both services are entirely free of charge to every organization we work with.