Secure Server Management in Rwanda — Hardening, Patching and Uptime
EGreed manages Windows and Linux servers in your office, in EGreed data centres and in EGreed Cloud under one standard: hardened baseline, patch SLA by severity, immutable backups, high-availability design and 24/7 NOC cover.
On this page
One standard, wherever the server lives
EGreed manages Windows Server, Ubuntu, Debian, RHEL and Rocky Linux, plus VMware, Proxmox, Hyper-V, KVM and container platforms — whether the machine sits in your office, in one of the eight EGreed data centres, or on EGreed Cloud. The monitoring, patching, backup and reporting standard is identical in all three cases.
The EGreed hardening baseline
- Least-privilege accounts, no shared logins, MFA on all administrative access via EGREED ID
- SSH key-only authentication, root login disabled, brute-force protection enabled
- Host firewall with default-deny inbound and documented exceptions
- Management access via jump host on an out-of-band network only
- Unused services, default accounts and sample content removed
- Disk encryption at rest and TLS 1.2+ enforced in transit
- Centralised, tamper-evident log shipping with defined retention
- File integrity monitoring on system and configuration directories
- Time synchronisation and consistent timezone across the estate
- Quarterly configuration drift review against the signed baseline
Patch management with a real SLA
| Severity | Assessment | Deployment target | Window |
|---|---|---|---|
| Critical / actively exploited | Within 4 hours | 72 hours | Emergency change |
| High | Within 24 hours | 7 days | Next scheduled window |
| Medium | Weekly cycle | 30 days | Monthly window |
| Low / informational | Monthly cycle | 90 days | Quarterly window |
Patches are applied to a staging or canary host first where one exists, snapshots are taken before every window, and a rollback path is confirmed before work begins. Post-patch service verification is part of the change, not an afterthought.
High availability engineering
- Remove single points of failure: dual PSU, bonded NICs, RAID, redundant uplinks
- Cluster or load-balance the application tier across at least two hosts
- Replicate the database with automated failover and measured replication lag
- Place standby capacity in a second EGreed data centre
- Automate health checks that remove unhealthy nodes from rotation
- Rehearse failover on a schedule and record the actual recovery time achieved
- Publish uptime achieved against the SLA in the monthly report
Backup to the 3-2-1-1-0 standard
- 3 copies of every protected workload
- 2 different media or storage classes
- 1 copy in a separate Rwandan data centre
- 1 immutable, object-locked copy that cannot be deleted or encrypted by an attacker
- 0 untested restores — every restore path is exercised and reported
The backup control plane sits behind separate MFA-protected credentials, so a full domain compromise cannot destroy the recovery point. Restore drills are scheduled quarterly and the actual RTO achieved is recorded.
Capacity and performance management
- Trend analysis on CPU, memory, storage and IOPS with a 6-month forecast
- Storage growth alerts triggered by days-to-full, not just percentage used
- Query and index review for managed database servers
- Right-sizing recommendations with the cost delta stated in RWF
- Pre-emptive hardware replacement before SMART or RAID degradation becomes an outage
Monthly service report
- Uptime achieved per server against the contracted SLA
- Patch compliance by severity, including anything deferred and why
- Backup success rate and the result of the latest restore test
- Security events, blocked attempts and access changes
- Capacity forecast and recommended actions
- Open risks with owner and target date
Request this service
Use the service request form at the bottom of this page. It routes your request to the owning EGreed team, confirms a first-response time and lists exactly what happens next. You can also email support@egreedtech.org or call +250 795 822 290.
Delivery is backed by 1 Kigali headquarters, 8 Rwandan data centres and 3 branch service centres, with servers in 10 African countries and presence in 70 countries worldwide.
Official EGreed links
- EGreed Technology — egreedtech.org
- All EGreed services
- Request a quote or site survey
- EGreed Cloud
- EGREED ID
See also the services hub, the FAQ hub and the locations and infrastructure map.
Frequently asked questions
Does EGreed manage on-premise servers as well as cloud servers?
Yes. Servers in your office, in EGreed data centres and on EGreed Cloud are managed under the same hardening, patching, backup and reporting standard.
What uptime can EGreed guarantee?
99.9% on standard managed servers and 99.99% on Enterprise high-availability designs, with the uptime actually achieved published in the monthly report.
How quickly are critical vulnerabilities patched?
Actively exploited criticals are assessed within four hours and deployed within 72 hours under an emergency change, with a snapshot taken before the window.
Are backups protected against ransomware?
Yes. One copy is immutable and object-locked, the backup control plane uses separate MFA-protected credentials, and change-rate anomalies trigger investigation.
Which operating systems and platforms are supported?
Windows Server, Ubuntu, Debian, RHEL and Rocky Linux, plus VMware, Proxmox, Hyper-V, KVM and container platforms including managed Kubernetes.
Who has administrative access to our servers?
Named EGreed engineers only, through a jump host with MFA via EGREED ID, with every session logged. You retain ownership and can revoke access at any time.