The FormaVid Small Business Appliance is designed to be built on a secure Debian-9 GNU/Linux platform (or compatible base distro). Convenient and flexible methods are provided to assist in keeping it that way.
Debian-9 has both the unattended upgrades and apt-listchanges packages installed by default which keeps the computer current with the latest updates automatically.
SELinux is a kernel security module that provides a mechanism for supporting access control security policies, including United States Department of Defense styles.
Apache httpd provides several different modules to control access and authorization. Flexibly authenticate users and control access by host, address rewriting, or variables.
Fail2ban scans log files and bans IPs with malicious signs such as too many password failures, seeking for exploits, etc. Able to reject IP addresses for configurable times.