This site was created as part of a university web security assignment and is hosted on a cloud virtual machine in Azure.

The purpose is to build a small website on a server and then secure it.

HTTPS is enabled with a Let’s Encrypt certificate, all HTTP traffic is redirected to HTTPS, and firewall rules allow access only to the required web ports. Apache has also been configured with stronger TLS settings and security-focused HTTP headers to reduce common attack risks.

The final setup is validated with standard security checks: Mozilla Observatory, SecurityHeaders, SSL Labs and CryptCheck.