MSPs everywhere are concerned with attacks against their tools — and for a good reason. Attacks against MSPs are rising, and large-scale ransomware attacks can be catastrophic for an IT business. MSPs face the difficult task of defending against organized cyber criminals, who often have more money and resources than the MSP. Having experienced this problem firsthand, we created Reverse-proxy-as-a-Service (RPaaS), a reverse proxy designed specifically for MSPs. This monthly subscription service offers a drop-in solution to deploy all the needed security layers to protect self-hosted MSP tools. It reduces the attack surface by implementing eight different security controls that work in concert to achieve security best practices.