ModSecurity is a plugin for Apache web servers that functions as a web app layer firewall. It's used to stop attacks towards script-driven sites through the use of security rules that contain specific expressions. That way, the firewall can prevent hacking and spamming attempts and shield even websites which aren't updated on a regular basis. As an example, several unsuccessful login attempts to a script administrative area or attempts to execute a certain file with the purpose to get access to the script will trigger certain rules, so ModSecurity shall block these activities the moment it detects them. The firewall is quite efficient because it monitors the whole HTTP traffic to an Internet site in real time without slowing it down, so it can easily prevent an attack before any damage is done. It also maintains an incredibly detailed log of all attack attempts which contains more information than traditional Apache logs, so you could later check out the data and take additional measures to improve the security of your Internet sites if required.

ModSecurity in Cloud Website Hosting

We offer ModSecurity with all cloud website hosting plans, so your Internet applications will be protected against malicious attacks. The firewall is activated by default for all domains and subdomains, but if you would like, you will be able to stop it via the respective area of your Hepsia CP. You could also activate a detection mode, so ModSecurity will keep a log as intended, but won't take any action. The logs that you'll discover inside Hepsia are very detailed and include information about the nature of any attack, when it took place and from what IP address, the firewall rule that was triggered, etcetera. We use a range of commercial rules that are frequently updated, but sometimes our administrators include custom rules as well so as to efficiently protect the Internet sites hosted on our machines.

ModSecurity in Semi-dedicated Servers

Any web program that you install in your new semi-dedicated server account will be protected by ModSecurity as the firewall is provided with all our hosting packages and is turned on by default for any domain and subdomain you include or create using your Hepsia hosting Control Panel. You'll be able to manage ModSecurity through a dedicated area in Hepsia where not simply could you activate or deactivate it entirely, but you may also activate a passive mode, so the firewall won't stop anything, but it shall still maintain a record of possible attacks. This takes simply a click and you shall be able to look at the logs no matter if ModSecurity is in active or passive mode through the same section - what the attack was and where it originated from, how it was addressed, and so forth. The firewall uses two sets of rules on our web servers - a commercial one which we get from a third-party web security company and a custom one that our administrators update manually as to respond to recently discovered threats as quickly as possible.

ModSecurity in VPS Servers

All VPS servers that are set up with the Hepsia CP come with ModSecurity. The firewall is set up and turned on by default for all domains which are hosted on the machine, so there shall not be anything special that you will have to do to protect your websites. It shall take you just a mouse click to stop ModSecurity if necessary or to turn on its passive mode so that it records what goes on without taking any actions to prevent intrusions. You will be able to look at the logs created in passive or active mode through the corresponding section of Hepsia and learn more about the form of the attack, where it came from, what rule the firewall employed to handle it, and so forth. We use a mix of commercial and custom rules so as to ensure that ModSecurity shall prevent as many risks as possible, thus boosting the security of your web apps as much as possible.

ModSecurity in Dedicated Servers

If you choose to host your websites on a dedicated server with the Hepsia CP, your web applications shall be secured right from the start as ModSecurity is provided with all Hepsia-based packages. You will be able to control the firewall easily and if necessary, you'll be able to turn it off or switch on its passive mode when it'll only keep a log of what's happening without taking any action to stop potential attacks. The logs which you will find inside the exact same section of the Control Panel are incredibly detailed and contain details about the attacker IP, what website and file were attacked and in what ways, what rule the firewall employed to stop the intrusion, and so forth. This information will permit you to take measures and improve the security of your Internet sites even more. To be on the safe side, we use not only commercial rules, but also custom-made ones which our administrators include when they detect attacks that have not yet been included within the commercial pack.