ModSecurity is a plugin for Apache web servers which acts as a web application layer firewall. It's employed to prevent attacks against script-driven sites through the use of security rules that contain certain expressions. In this way, the firewall can prevent hacking and spamming attempts and shield even sites which are not updated often. For example, a number of failed login attempts to a script administrator area or attempts to execute a specific file with the objective to get access to the script shall trigger certain rules, so ModSecurity shall block these activities the moment it identifies them. The firewall is quite efficient because it monitors the entire HTTP traffic to a website in real time without slowing it down, so it will be able to stop an attack before any harm is done. It additionally maintains an incredibly comprehensive log of all attack attempts which contains more information than traditional Apache logs, so you could later analyze the data and take further measures to boost the security of your websites if needed.

ModSecurity in Website Hosting

ModSecurity can be found with every website hosting plan which we offer and it's activated by default for every domain or subdomain that you include through your Hepsia CP. In the event that it disrupts any of your apps or you'd like to disable it for whatever reason, you shall be able to do that through the ModSecurity section of Hepsia with only a click. You may also activate a passive mode, so the firewall will discover possible attacks and maintain a log, but won't take any action. You can see extensive logs in the very same section, including the IP address where the attack came from, what precisely the attacker aimed to do and at what time, what ModSecurity did, and so forth. For max security of our customers we use a set of commercial firewall rules blended with custom ones that are included by our system admins.

ModSecurity in Semi-dedicated Servers

We have incorporated ModSecurity as a standard in all semi-dedicated server products, so your web apps will be protected as soon as you install them under any domain or subdomain. The Hepsia CP which is included with the semi-dedicated accounts shall allow you to enable or disable the firewall for any website with a click. You will also be able to switch on a passive detection mode in which ModSecurity will maintain a log of potential attacks without actually stopping them. The detailed logs include things like the nature of the attack and what ModSecurity response that attack initiated, where it came from, etc. The list of rules we use is constantly updated in order to match any new risks that could appear on the Internet and it consists of both commercial rules that we get from a security corporation and custom-written ones which our administrators add if they discover a threat that is not present inside the commercial list yet.

ModSecurity in VPS Servers

All VPS servers which are provided with the Hepsia Control Panel come with ModSecurity. The firewall is set up and switched on by default for all domains that are hosted on the machine, so there will not be anything special which you'll have to do to protect your sites. It will take you simply a mouse click to stop ModSecurity if required or to activate its passive mode so that it records what goes on without taking any measures to stop intrusions. You shall be able to see the logs generated in passive or active mode via the corresponding section of Hepsia and discover more about the form of the attack, where it came from, what rule the firewall used to deal with it, etcetera. We employ a mixture of commercial and custom rules so as to make certain that ModSecurity shall stop as many risks as possible, hence increasing the security of your web apps as much as possible.

ModSecurity in Dedicated Servers

When you opt to host your websites on a dedicated server with the Hepsia CP, your web apps will be protected right away because ModSecurity is available with all Hepsia-based packages. You will be able to control the firewall with ease and if necessary, you shall be able to turn it off or switch on its passive mode when it will only maintain a log of what's going on without taking any action to stop possible attacks. The logs which you'll find within the same section of the Control Panel are extremely detailed and include data about the attacker IP, what site and file were attacked and in what ways, what rule the firewall employed to prevent the intrusion, and so forth. This info will permit you to take measures and enhance the protection of your websites even more. To be on the safe side, we use not only commercial rules, but also custom-made ones which our administrators add every time they identify attacks which have not yet been included within the commercial pack.