ModSecurity is an efficient firewall for Apache web servers which is employed to stop attacks towards web applications. It monitors the HTTP traffic to a specific Internet site in real time and prevents any intrusion attempts the instant it identifies them. The firewall uses a set of rules to accomplish that - as an example, attempting to log in to a script administrator area unsuccessfully several times triggers one rule, sending a request to execute a certain file which may result in accessing the site triggers another rule, and so on. ModSecurity is among the best firewalls around and it will secure even scripts that are not updated on a regular basis because it can prevent attackers from employing known exploits and security holes. Quite comprehensive data about every intrusion attempt is recorded and the logs the firewall maintains are much more detailed than the standard logs generated by the Apache server, so you can later analyze them and decide if you need to take more measures in order to increase the protection of your script-driven websites.

ModSecurity in Hosting

We provide ModSecurity with all hosting plans, so your web applications shall be resistant to destructive attacks. The firewall is switched on as standard for all domains and subdomains, but if you'd like, you shall be able to stop it via the respective area of your Hepsia Control Panel. You could also activate a detection mode, so ModSecurity will keep a log as intended, but shall not take any action. The logs which you'll find within Hepsia are quite detailed and feature data about the nature of any attack, when it took place and from what IP address, the firewall rule that was triggered, and so forth. We employ a set of commercial rules that are frequently updated, but sometimes our admins add custom rules as well in order to efficiently protect the Internet sites hosted on our machines.

ModSecurity in Semi-dedicated Hosting

All semi-dedicated hosting plans which we offer include ModSecurity and given that the firewall is turned on by default, any site you set up under a domain or a subdomain shall be secured immediately. An independent section within the Hepsia CP which comes with the semi-dedicated accounts is devoted to ModSecurity and it'll enable you to start and stop the firewall for any website or enable a detection mode. With the last option, ModSecurity won't take any action, but it shall still identify possible attacks and will keep all data within a log as if it were completely active. The logs could be found inside the exact same section of the Control Panel and they offer details about the IP where an attack originated from, what its nature was, what rule ModSecurity applies to identify and stop it, and so on. The security rules we use on our machines are a mix between commercial ones from a security business and custom ones created by our system admins. As a result, we provide increased security for your web applications as we can shield them from attacks before security companies release updates for completely new threats.

ModSecurity in VPS

ModSecurity comes with all Hepsia-based virtual private servers that we offer and it shall be activated automatically for any new domain or subdomain which you add on the web server. In this way, any web app you install shall be secured right away without doing anything manually on your end. The firewall may be handled from the section of the Control Panel that has the same name. This is the place in whichyou'll be able to switch off ModSecurity or let its passive mode, so it won't take any action against threats, but will still keep a comprehensive log. The recorded info is available within the same area as well and you will be able to see what IPs any attacks came from so that you block them, what the nature of the attempted attacks was and in accordance with what security rules ModSecurity responded. The rules which we employ on our servers are a combination between commercial ones we get from a security firm and custom ones that are included by our admins to maximize the protection of any web applications hosted on our end.

ModSecurity in Dedicated Hosting

When you decide to host your websites on a dedicated server with the Hepsia Control Panel, your web programs shall be protected immediately because ModSecurity is supplied with all Hepsia-based solutions. You shall be able to manage the firewall effortlessly and if needed, you will be able to turn it off or switch on its passive mode when it will only keep a log of what is occurring without taking any action to stop potential attacks. The logs that you'll find inside the very same section of the CP are incredibly detailed and contain info about the attacker IP address, what website and file were attacked and in what way, what rule the firewall used to prevent the intrusion, and so on. This data shall permit you to take measures and increase the protection of your Internet sites even more. To be on the safe side, we employ not only commercial rules, but also custom-made ones that our staff add when they recognize attacks which haven't yet been included within the commercial pack.