You can never guarante for 100% it's secure, anyone who does is lying to sell you crap... For example, if a site is hosting static content, perhaps there's a vu

You can never guarante for 100% it's secure, anyone who does is lying to sell you crap... For example, if a site is hosting static content, perhaps there's a vulneraiblity in the sever itself (request handler maybe of the webserver, or the operating system, or even the hardware...) If you want a good web server, take one thats tried and tested (maybe apache or so) as they already have alot of bugfixes in place, run it on a good hardened linux box. (i like gentoo, but otheres can be hardened aswell... ;)) And monitor it for intrustions constantly so if it occurs, you can react accordingly and in a timely manner. Network segmentation etc., everything adds up and makes things harder for an adversary. Remember: anyone who says it's 100% secure lies to sell you crap, thats the main thing i guess... :) good luck!