By default, all HatchBox servers come with several important security defaults.
Firewalls are enabled on every server, only allowing SSH, HTTP, and HTTPS traffic. Your database and other services won't be accessible outside your server.
SSH password authentication is also disabled to prevent any attempts to break into your server by brute force.
We also enable automatic security updates for all packages installed so you can get the latest security fixes while you sleep.
This is just a baseline of security for you, so you're free to harden your server to your heart's content. Additional security like using fail2ban can go a long ways to preventing any unauthorized access to your servers.