ModSecurity is a highly effective web application layer firewall for Apache web servers. It monitors the whole HTTP traffic to a website without affecting its operation and in case it identifies an intrusion attempt, it prevents it. The firewall also keeps a more thorough log for the site visitors than any web server does, so you shall be able to keep an eye on what is going on with your websites a lot better than if you rely simply on conventional logs. ModSecurity works with security rules based on which it stops attacks. For instance, it detects if someone is trying to log in to the administrator area of a particular script a number of times or if a request is sent to execute a file with a certain command. In such instances these attempts trigger the corresponding rules and the firewall software blocks the attempts right away, and then records in-depth details about them inside its logs. ModSecurity is among the very best software firewalls on the market and it could easily protect your web apps against thousands of threats and vulnerabilities, particularly in case you don’t update them or their plugins frequently.

ModSecurity in Shared Web Hosting

ModSecurity comes by default with all shared web hosting packages that we offer and it'll be switched on automatically for any domain or subdomain that you add/create in your Hepsia hosting Control Panel. The firewall has 3 different modes, so you'll be able to switch on and deactivate it with a click or set it to detection mode, so it'll keep a log of all attacks, but it'll not do anything to prevent them. The log for each of your Internet sites will feature comprehensive information including the nature of the attack, where it came from, what action was taken by ModSecurity, and so on. The firewall rules that we use are frequently updated and include both commercial ones we get from a third-party security business and custom ones which our system administrators add in the event that they detect a new sort of attacks. That way, the sites you host here shall be a lot more secure without any action needed on your end.

ModSecurity in Semi-dedicated Hosting

All semi-dedicated hosting plans which we offer feature ModSecurity and because the firewall is turned on by default, any website that you build under a domain or a subdomain shall be protected right from the start. An individual section within the Hepsia Control Panel which comes with the semi-dedicated accounts is devoted to ModSecurity and it shall permit you to stop and start the firewall for any website or enable a detection mode. With the last mentioned, ModSecurity won't take any action, but it will still recognize possible attacks and will keep all info inside a log as if it were 100% active. The logs could be found in the very same section of the CP and they feature specifics about the IP where an attack originated from, what its nature was, what rule ModSecurity applies to recognize and stop it, and so on. The security rules which we employ on our servers are a mix of commercial ones from a security company and custom ones created by our system admins. For that reason, we offer higher security for your web programs as we can shield them from attacks even before security corporations release updates for new threats.

ModSecurity in VPS Hosting

All virtual private servers that are offered with the Hepsia CP come with ModSecurity. The firewall is set up and switched on by default for all domains that are hosted on the web server, so there shall not be anything special which you will have to do to protect your websites. It shall take you a click to stop ModSecurity if required or to turn on its passive mode so that it records what happens without taking any steps to prevent intrusions. You will be able to view the logs produced in passive or active mode from the corresponding section of Hepsia and find out more about the type of the attack, where it came from, what rule the firewall used to tackle it, and so forth. We employ a mix of commercial and custom rules so as to ensure that ModSecurity shall prevent as many threats as possible, consequently enhancing the security of your web apps as much as possible.

ModSecurity in Dedicated Web Hosting

If you opt to host your sites on a dedicated server with the Hepsia Control Panel, your web programs will be protected immediately because ModSecurity is provided with all Hepsia-based solutions. You'll be able to regulate the firewall effortlessly and if necessary, you shall be able to turn it off or switch on its passive mode when it shall only keep a log of what is occurring without taking any action to stop potential attacks. The logs that you can find in the exact same section of the CP are extremely detailed and include details about the attacker IP, what website and file were attacked and in what ways, what rule the firewall used to stop the intrusion, and so forth. This data will allow you to take measures and improve the security of your Internet sites even more. To be on the safe side, we use not only commercial rules, but also custom-made ones that our admins include when they detect attacks that have not yet been included within the commercial pack.