Sold by: Sers One Cloud
Deployed on AWS
AWS Free Tier
This is a repackaged open source software product wherein additional charges apply for the hardened Ubuntu 24.04 LTS image, per-instance secret generation, a setup gate that protects the web installer, automatic security updates and seller support. Contains WordPress 7.1.3, Apache 2.4, PHP 8.3 and MariaDB 10.11. No default passwords.
Overview
What you pay for WordPress is free, open source software, and this product does not charge for WordPress itself. The software charge is for what Sers One Cloud adds to it: a prebuilt, hardened Ubuntu 24.04 LTS image in which the web server, PHP, the database and WordPress are installed and configured to work together; first-boot automation that generates every secret on your own instance; a setup gate that keeps the web installer closed to strangers until you have finished it; automatic installation of operating system security updates; and support from Sers One Cloud for the image. AWS infrastructure charges (EC2, EBS, data transfer) are billed separately by AWS.
What is in the image
- WordPress 7.1.3:
- Apache 2.4, PHP 8.3 and MariaDB 10.11, installed from the Ubuntu 24.04 LTS repositories, so the security updates that Ubuntu publishes for these packages are installed automatically.
- WP-CLI for command-line administration, and certbot with its Apache plugin to obtain a Let's Encrypt certificate with one command.
- Ubuntu 24.04 LTS (x86_64), fully patched at build time.
What Sers One Cloud adds
- No default or shared credentials. The database password, the eight WordPress keys and salts and a one-time setup password are generated on your instance at first boot. The image itself holds no secrets.
- Setup gate. Until you complete the first-time setup, every URL of the site answers with HTTP Basic authentication. The user is "setup"; the password is unique to your instance and can only be read over SSH with your own key pair. Internet scanners cannot reach the WordPress installer and create the administrator account before you do. One command removes the gate and deletes the one-time credentials; it refuses to run until the WordPress installer has been completed.
- Operating system hardening. SSH accepts key authentication only: no password login, no root login, all account passwords locked. Kernel and network sysctl hardening is applied, core dumps are off, and Ubuntu Pro/ESM prompts and telemetry are removed. The image works with IMDSv2.
- Database not exposed. MariaDB listens on 127.0.0.1 only. Database administration uses the local socket (sudo mariadb) and needs no password. The WordPress database and its account are created at first boot.
- Web server hardening. Apache sends hardening headers and denies requests for dot-files and for dump and backup file types. The WordPress configuration file belongs to root and is not writable by the web server, the theme and plugin file editor of the dashboard is disabled, and WordPress is set to install its own minor releases automatically.
- Automatic security updates. Ubuntu security updates are installed automatically by unattended-upgrades. The updates do not reboot the instance on their own: you choose when to reboot.
- Clean image. No build logs, shell history, SSH keys or machine identity from the build remain in the image.
First use
- Launch the AMI with your EC2 key pair and connect with SSH as the user "ubuntu".
- Run "sudo wordpress-sersonecloud-credentials show" to read the one-time setup password.
- Open the public address of the instance in a browser over HTTP, sign in to the setup gate with the user "setup" and that password, and complete the WordPress installer. The database is already connected: you only choose the language, the site title and the administrator account.
- Run "sudo wordpress-sersonecloud-setup-complete" to remove the gate.
- Point a domain name at the instance and enable HTTPS with the preinstalled certbot.
The usage instructions describe every screen and command, and cover backup, restore, credential rotation and health checks.
Good to know
- After first boot only ports 22 and 80 listen on the network; 443 is added when you enable HTTPS. No host firewall is enabled: the security group is the access control.
- The image has no mail server and AWS restricts outbound port 25. To send e-mail from WordPress, configure an external SMTP provider.
- This is a single-instance product. It does not include managed backups, high availability, a CIS benchmark or any certification.
- Recommended instance type: t3.medium. Root volume: 20 GiB gp3.
Highlights
- Hardenet Ubuntu 24.04 LTS base: SSH key authentication only, no root or password login, sysctl hardening, automatic security updates, MariaDB on 127.0.0.1 only, Apache hardening headers. No host firewall: the security group controls access.
- WordPress 7.1.3 with Apache 2.4, PHP 8.3 and MariaDB 10.11, plus WP-CLI and certbot for one-command HTTPS. The database is created and connected at first boot, so the installer only asks for your language, site title and administrator account.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04 LTS
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/month |
|---|---|---|
standart | Hardened WP Stack on Ubuntu 24.04 LTS with setup gate, automatic security updates and Sers One Cloud support. Run as many instances as you need during your contract. | $400.00 |
Dimensions summary
This listing offers one pricing dimension, called standart, billed as a contract. You pay a fixed amount for the term rather than per hour or by usage. During your contract, you can run as many instances as you need under the single commitment. Your price does not scale with the number of instances. The contract covers the packaged image, setup gate, automatic security updates, and vendor support. Servers, storage, and data transfer are billed separately by your cloud provider and are not part of this charge. Contracts can renew automatically unless you turn renewal off.
Top-of-mind questions for buyers
An instance is one running copy of the packaged server image deployed from the listing. You can run as many instances as you need during the contract term. Your software price stays fixed and does not scale with the instance count.
The contract covers the packaged server image, first-boot automation, the setup gate, helper commands, security update configuration, and email support. Your servers, storage, and data transfer are billed separately by your cloud provider. Those infrastructure charges are not part of this software price.
Contracts can renew automatically. To stop future charges, turn off automatic renewal in your subscription settings before the renewal date. If the product is retired, the vendor keeps supporting existing subscribers for at least 90 days. Software charges are not refundable.
www.sersonecloud.com+1
Helpful?
Vendor refund policy
All sales are final. Contract fees paid through AWS Marketplace are non-refundable, including for unused time, partial contract periods and early cancellation. To avoid further charges, turn off automatic renewal before the renewal date. Billing questions can be sent to https://sersonecloud.com/#contact ; any exception is at the sole discretion of Sers One Cloud. AWS infrastructure charges (EC2, EBS, data transfer) are billed by AWS and are not refunded by Sers One Cloud.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Initial release (October 2026).
- Joomla! 6.2.0, the official Full Package, unmodified and checksum-verified at build time.
- Ready-to-run stack: Apache 2.4, PHP 8.3 and MariaDB 10.11 on Ubuntu 24.04 LTS, fully patched at build time.
- No default passwords: the database password and a one-time setup password are created on each instance at first boot.
- A setup gate keeps the site private until you run "sudo joomla-sersonecloud-setup-complete".
- Ubuntu security updates install automatically (no automatic reboot). SSH key login only.
- certbot is preinstalled for one-command HTTPS. No mail server is included; connect an SMTP provider for email.
Additional details
Usage instructions
WordPress 7.1.3 on Ubuntu 24.04 LTS with Apache 2.4, PHP 8.3 and MariaDB 10.11.
BEFORE LAUNCH
- Use an EC2 key pair you hold. SSH password login is disabled; there is no default password.
- t3.medium, 20 GiB gp3. Security group: 22/tcp from your IP only, 80/tcp and 443/tcp open. No host firewall.
- Attach an Elastic IP or DNS name first (WordPress stores the address).
FIRST SETUP
- ssh -i <your-key.pem> ubuntu@<public-ip>
- sudo wordpress-sersonecloud-credentials show Note SETUP_PASSWORD. Do not run "credentials done"; step 5 does it.
- Open http://<public-ip>/ and pass the setup gate: user "setup", password SETUP_PASSWORD.
- In the WordPress installer choose the language, site title and your own administrator account (the database is already connected). Click "Install WordPress".
- sudo wordpress-sersonecloud-setup-complete Removes the gate and the one-time values; refuses until WordPress is installed.
- HTTPS: point a DNS name at the instance, then: sudo certbot --apache -d <your-domain> and in Settings > General set both addresses to https://<your-domain>
SENSITIVE DATA
- Database "wordpress" (MariaDB, /var/lib/mysql, 127.0.0.1 only). Admin: sudo mariadb (socket auth, no password).
- DB password, keys and salts: /var/www/wordpress/wp-config.php (root:www-data 0640).
- Uploads: /var/www/wordpress/wp-content/uploads. Logs: /var/log/apache2.
- Until step 5: /etc/wordpress-sersonecloud/instance-credentials (root only).
- All data stays on the EBS volume of your instance.
ENCRYPTION
- At rest: enable EBS encryption at launch (Configure storage > Advanced) or EBS encryption by default.
- In transit: HTTP until step 6, then TLS (Let's Encrypt, renewed automatically). SSH is encrypted; database traffic never leaves the instance.
ROTATION No secrets ship in the image. Rotate per your policy and after any suspected disclosure.
- Admin password: Dashboard > Users > Profile.
- Keys and salts: sudo wp config shuffle-salts --allow-root --path=/var/www/wordpress
- DB password: in sudo mariadb run ALTER USER 'wp_user'@'localhost' IDENTIFIED BY '<new>'; and the same for 'wp_user'@'127.0.0.1'; then set DB_PASSWORD in wp-config.php.
- SSH key: /home/ubuntu/.ssh/authorized_keys and /home/ec2-user/.ssh/authorized_keys.
- TLS: test the renewal with sudo certbot renew --dry-run
BACKUP AND RESTORE No proprietary data store. Back up: sudo mariadb-dump --single-transaction wordpress > wordpress.sql sudo tar -czf wp-content.tar.gz -C /var/www/wordpress wp-content Store both off the instance, encrypted (e.g. Amazon S3). Restore: sudo mariadb wordpress < wordpress.sql, sudo tar -xzf wp-content.tar.gz -C /var/www/wordpress, sudo chown -R www-data:www-data /var/www/wordpress/wp-content. EBS snapshots also work.
HEALTH CHECK
- EC2 status checks; CloudWatch alarm on StatusCheckFailed.
- sudo systemctl is-active apache2 mariadb (both "active")
- curl -I http://localhost/ (200 or 301; 401 while the gate is active)
- First-boot log: sudo journalctl -t wordpress-sersonecloud-firstboot
UPDATES Ubuntu security updates and WordPress minor releases install automatically; reboot when /var/run/reboot-required exists. Other updates: Dashboard > Updates.
E-MAIL No mail server; EC2 restricts port 25. Use an SMTP plugin with Amazon SES or similar (port 587).
QUOTAS One instance (2 vCPUs of the On-Demand Standard instances quota), one 20 GiB gp3 volume, optional Elastic IP. No increase is needed; on VcpuLimitExceeded request one in Service Quotas.
COST Software charge shown on the product page, billed through AWS Marketplace. AWS bills EC2 hours, the gp3 volume, public IPv4, data transfer out and snapshots.
Support
Vendor support
Sers One Cloud provides support for this image: launching it, the first boot, the setup gate, the helper commands (wordpress-sersonecloud-credentials and wordpress-sersonecloud-setup-complete) and the configuration that ships in the image (Apache, PHP, MariaDB, automatic security updates, HTTPS with certbot). Contact: https://sersonecloud.com/#contact When you write, please include the AWS Region, the instance type, the product version (see /opt/wordpress-sersonecloud/PRODUCT-INFO on the instance) and the results of the health checks from the usage instructions. Never send passwords or the contents of the credentials file. Not covered: the design and development of your site, and themes and plugins from third parties. WordPress itself is maintained by the WordPress open source project.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
This is a repackaged open source software product wherein additional charges apply for security hardening, automated first-boot setup, security update configuration and support by Sers One Cloud. Joomla! 6.2.0 on Ubuntu 24.04 LTS with Apache, PHP 8.3 and MariaDB, ready in minutes with no default passwords.
This is a repackaged open source software product wherein additional charges apply for security hardening, automated first-boot setup, security update configuration and support by Sers One Cloud. Uptime Kuma 2.5.6 on Ubuntu 24.04 LTS with nginx: uptime monitoring with status pages and alerts, ready in minutes behind a private setup gate.
This is a repackaged software product wherein additional charges apply for a pre-hardened, SI Core STIG Hardened image and seller support. The LAMP Stack Ubuntu 24.04 LTS is an optimized solution for deploying robust web applications in the cloud. With Apache, MySQL, and PHP pre-installed and pre-configured, the LAMP Stack Ubuntu 24.04 LTS allows developers to rapidly build, test, and deploy applications while maintaining security compliance. Benefit from the long-term support of Ubuntu 24.04 LTS, ensuring your applications receive timely updates and patches. The LAMP Stack Ubuntu 24.04 LTS is perfect for developers seeking a reliable environment for dynamic websites, content management systems, and data-driven applications.
This is a repackaged open source software product wherein additional charges apply for security hardening, automated first-boot setup, security update configuration and support by Sers One Cloud. EspoCRM 10.0.10 on Ubuntu 24.04 LTS with Apache, PHP 8.3 and MariaDB: your own CRM, ready in minutes with no default passwords.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.