ModSecurity is a plugin for Apache web servers which functions as a web application layer firewall. It is used to prevent attacks toward script-driven sites by using security rules which contain specific expressions. This way, the firewall can prevent hacking and spamming attempts and protect even sites that aren't updated often. For example, several unsuccessful login attempts to a script admin area or attempts to execute a certain file with the intention to get access to the script shall trigger specific rules, so ModSecurity shall stop these activities the instant it discovers them. The firewall is incredibly efficient as it screens the whole HTTP traffic to a site in real time without slowing it down, so it can prevent an attack before any damage is done. It furthermore keeps a very comprehensive log of all attack attempts that contains more information than standard Apache logs, so you could later examine the data and take additional measures to boost the security of your sites if needed.

ModSecurity in Cloud Web Hosting

ModSecurity comes by default with all cloud web hosting plans which we offer and it'll be activated automatically for any domain or subdomain you add/create inside your Hepsia hosting Control Panel. The firewall has three different modes, so you could switch on and disable it with simply a click or set it to detection mode, so it will maintain a log of all attacks, but it will not do anything to stop them. The log for any of your websites will contain in-depth information which includes the nature of the attack, where it originated from, what action was taken by ModSecurity, and so forth. The firewall rules which we use are frequently updated and comprise of both commercial ones we get from a third-party security company and custom ones that our system administrators include in the event that they detect a new sort of attacks. This way, the Internet sites you host here will be far more secure without any action expected on your end.

ModSecurity in Semi-dedicated Servers

We've integrated ModSecurity by default inside all semi-dedicated server products, so your web applications will be protected the instant you install them under any domain or subdomain. The Hepsia Control Panel which comes with the semi-dedicated accounts shall permit you to enable or turn off the firewall for any site with a click. You will also be able to switch on a passive detection mode in which ModSecurity will keep a log of possible attacks without really preventing them. The comprehensive logs include things like the nature of the attack and what ModSecurity response that attack caused, where it came from, etcetera. The list of rules which we use is constantly updated in order to match any new risks which might appear on the Internet and it includes both commercial rules that we get from a security company and custom-written ones which our admins add in the event that they find a threat that is not present within the commercial list yet.

ModSecurity in VPS Servers

ModSecurity is pre-installed on all VPS servers which are set up with the Hepsia hosting Control Panel, so your web apps shall be protected from the second your server is ready. The firewall is switched on by default for any domain or subdomain on the VPS, but if needed, you could deactivate it with a click of your mouse via the corresponding section of Hepsia. You can also set it to work in detection mode, so it shall keep an extensive log of any potential attacks without taking any action to prevent them. The logs can be found in the same section and include details about the nature of the attack, what IP address it came from and what ModSecurity rule was triggered to stop it. For optimum security, we use not just commercial rules from a firm working in the field of web security, but also custom ones our administrators include manually in order to react to new risks which are still not dealt with in the commercial rules.

ModSecurity in Dedicated Servers

ModSecurity is included with all dedicated servers which are integrated with our Hepsia CP and you will not have to do anything specific on your end to employ it since it is turned on by default whenever you add a new domain or subdomain on your hosting server. In case it interferes with some of your programs, you will be able to stop it through the respective section of Hepsia, or you can leave it operating in passive mode, so it'll recognize attacks and shall still maintain a log for them, but shall not block them. You'll be able to examine the logs later to find out what you can do to enhance the protection of your sites since you'll find info such as where an intrusion attempt came from, what Internet site was attacked and based on what rule ModSecurity reacted, and so on. The rules we employ are commercial, hence they are constantly updated by a security firm, but to be on the safe side, our admins also add custom rules every now and then in order to deal with any new threats they have discovered.