session — infra-console
visitor@web:~$ whoami
CRITICAL ADVISORY · OCT 2026 PHP2Shell Vulnerabilities (CVE-2026-109618 / 109619). Is your server safe? Free scan & safe upgrade options →

Your servers, your DNS, your domain.
Someone should actually be watching them.

I'm Abin Babu — a cybersecurity graduate who now manages live production infrastructure for a real client: AWS, DNS, hosting, and the CMS platforms running on top of it. I keep sites online, secured, and recoverable, so you don't have to learn what a security group is at 2am.

$ systemctl status --all
9 services · monitored
aws-compute
EC2 · Lambda · Amplify — configured & running
storage-backup
S3 automated backups — scheduled
dns-routing
Route 53 · Cloudflare — propagated
hosting-panel
CloudPanel · cPanel · Plesk — online
cms-layer
WordPress · Magento — patched
firewall
AWS SG · Linux/Windows FW — hardened
ssl-certs
auto-renew · expiry watch — monitored
mail-delivery
SES · SPF/DKIM/DMARC — verified
migration-lane
host-to-host · to-cloud — on standby
ls services/

What I actually do

No vague "digital solutions." Here's the exact stack I run for clients today, and can run for you.

UK Compliance

Cyber Essentials Readiness

Pre-audit vulnerability analysis & remediation across all 5 NCSC controls. 100% non-destructive external scan, zero passwords required, and full 14-day patch verification. Audit process →

Cloud

AWS infrastructure

EC2, Lambda functions, S3, Route 53, SES for transactional mail, and Amplify deployments — set up, configured, and kept running. Migration guide →

Hosting

Server & panel management

CloudPanel, cPanel and Plesk — provisioning, site deployment, SSL, and day-to-day server administration on Linux.

Networking

DNS & domains

Nameserver setup, Cloudflare configuration, DNS records and propagation — three years of hands-on hosting-industry DNS work.

CMS

WordPress & Magento

Installation, configuration, and ongoing management of both platforms for client sites and storefronts.

Security

Firewall & hardening

AWS security groups plus native Linux and Windows firewall configuration, tuned to what's actually exposed.

Resilience

Backups & recovery

Automated S3 backup pipelines, so "the server died" is an inconvenience, not an ending.

Migration

Site & server migrations

When you decide to move — host to host, or onto AWS — it's planned, tested, and switched over with minimal downtime. Learn process →

Email

Business email that delivers

Mail setup on your own domain, with SPF, DKIM and DMARC configured properly — so your invoices and replies land in inboxes. Fix guide →

CVE-2026-109618 & CVE-2026-109619 RESPONSE

PHP2Shell Vulnerability Check & Safe Patching

Disclosed in late October 2026, the critical "PHP2Shell" memory-safety flaws allow unauthenticated remote code execution (RCE) on vulnerable PHP web runtimes. If your server hosts WordPress, Magento, WooCommerce, or custom PHP, I provide fast remote verification and zero-downtime security upgrades.

Emergency PHP Security Audit & Upgrade Service

ACTIVE EXPLOITATION VECTOR · 24-HOUR TURNAROUND

Upstream patches were issued for PHP 8.2.35+, 8.3.36+, 8.4.27+, and 8.5.12+. Upgrading blindly risks breaking legacy themes or plugins, while older PHP versions (7.x – 8.1) require specialized backporting or server-level containment.

01 · VERIFY

Runtime & FPM Inspection

Non-invasive audit of running PHP-FPM pools, binary build stamps, and session upload vectors without service interruptions.

02 · SAFE UPGRADE

Zero-Downtime Patching

Upgrade to verified patched releases (or backported security fixes for older stacks) with complete pre-change rollback snapshots.

03 · COMPATIBILITY TEST

CMS & Plugin Validation

End-to-end testing of your WordPress / Magento checkout, forms, and database connectivity to guarantee zero site breakage.

Need an urgent check? Available immediately for UK and international business sites.
chat on WhatsApp (+44) → email for audit →
cat onboarding.log

How a new client actually starts

Four steps, in order — because skipping the audit is how people end up hiring someone after the breach, not before it.

01 · audit

Look at what's live

Current hosting, DNS, open ports, backup state — a plain-language report of what's exposed.

02 · configure

Set up the real thing

AWS, DNS, panel, and CMS configured properly — not just "working," but documented and repeatable.

03 · harden

Close what shouldn't be open

Firewall rules, security groups, and access tightened to what the site actually needs.

04 · monitor

Keep watching it

Backups running, uptime checked, and a person to call when something changes.

cat incidents_and_results.log

Recent operations & proven results

Real infrastructure problems, diagnosed methodically, fixed properly, and verified live.

email deliverability · 24h turnaround

Google & Yahoo spam rejection rescue

Problem: Client domain invoices and transactional receipts were landing in customers' spam folders after Google and Yahoo tightened DMARC enforcement.

Resolution: Audited DNS across Route 53 & Cloudflare, aligned SPF return-paths, generated 2048-bit DKIM keys, and configured strict DMARC policy with daily monitoring.

100% Inbox deliverability rate restored
cloud migration · zero downtime

45GB e-commerce store migrated to AWS

Problem: WooCommerce & Magento storefront crashing during marketing campaigns on shared hosting with 5+ second page response times.

Resolution: Provisioned dedicated AWS EC2 running CloudPanel, configured FastCGI caching and MariaDB pool tuning. Cut over with zero downtime.

0.7s Average page load (down from 4.8s)
security & recovery · same-day triage

Hacked WordPress cleanup & server lock-down

Problem: Production server compromised via an unpatched plugin, triggering rogue spam redirects and high-CPU background miner.

Resolution: Quarantined rogue processes, cleaned injected database tables, restricted SSH to key-only authentication, applied firewall filtering, and enabled automated daily off-site S3 snapshots.

0 Recurring infections or vulnerabilities
AWS Cloud · M365 · Cyber Essentials

UK Business Advisory: AWS Architecture, M365 2FA & Cyber Essentials Readiness

Problem: Growing UK management & strategy firm needed a resilient AWS operational environment, migration from legacy mail to Microsoft 365, company-wide 2FA enforcement, and technical preparation for official UK Cyber Essentials certification to qualify for corporate advisory bids.

Resolution: Provisioned production AWS accounts with least-privilege IAM and encrypted S3 backup storage. Executed Microsoft 365 mailbox migration with aligned SPF/DKIM/DMARC policies and conditional access 2FA. Audited and hardened all 5 technical controls required for Cyber Essentials readiness alongside their enterprise software partners.

100% Compliance achieved & Cyber Essentials audit-ready
for web & digital marketing agencies

Your white-label infrastructure partner

You build stunning websites and run campaigns. I handle the servers, DNS routing, SSL renewals, and email delivery behind the scenes so your developers don't burn unbillable hours troubleshooting hosting headaches.

partner with me →
cat about.log

Background

now
Managing live infrastructure for a client — AWS, Route 53, CloudPanel, and the CMS layer on top, end to end.
3 yrs ago
Hosting industry experience — DNS configuration and nameserver management, Cloudflare setup for external clients, cPanel and Plesk administration.
education
Cybersecurity graduate — the audit-first, least-access mindset behind every setup on this page.
side project
Built a warehouse stock-management demo site, end to end, to keep shipping outside client work.
./contact.sh

Start a conversation

Tell me what's running and what's worrying you about it. Use the live chat bubble for a quick word, or type below to send me an email.

contact — session
system: connected. describe your site, host, or what's currently breaking.

This opens a pre-filled email to admin@thatsgrand.uk. Prefer instant messaging? Open live chat or chat on WhatsApp (+44 7776812268).