ModSecurity is a highly effective firewall for Apache web servers that's used to prevent attacks toward web applications. It tracks the HTTP traffic to a given website in real time and blocks any intrusion attempts the moment it discovers them. The firewall relies on a set of rules to accomplish that - as an illustration, attempting to log in to a script administrator area without success several times triggers one rule, sending a request to execute a certain file which may result in accessing the website triggers another rule, etc. ModSecurity is one of the best firewalls out there and it'll preserve even scripts which are not updated often since it can prevent attackers from using known exploits and security holes. Incredibly thorough data about each and every intrusion attempt is recorded and the logs the firewall maintains are far more comprehensive than the conventional logs provided by the Apache server, so you could later take a look at them and decide whether you need to take extra measures so as to improve the protection of your script-driven sites.

ModSecurity in Cloud Hosting

We offer ModSecurity with all cloud hosting packages, so your Internet apps shall be protected against destructive attacks. The firewall is activated as standard for all domains and subdomains, but if you would like, you will be able to stop it using the respective section of your Hepsia CP. You'll be able to also switch on a detection mode, so ModSecurity shall keep a log as intended, but shall not take any action. The logs which you'll find inside Hepsia are extremely detailed and include data about the nature of any attack, when it happened and from what IP, the firewall rule that was triggered, and so on. We employ a set of commercial rules which are constantly updated, but sometimes our administrators include custom rules as well in order to better protect the Internet sites hosted on our servers.

ModSecurity in Semi-dedicated Hosting

ModSecurity is a part of our semi-dedicated hosting solutions and if you choose to host your websites with our company, there won't be anything special you'll have to do given that the firewall is switched on by default for all domains and subdomains that you include via your hosting Control Panel. If required, you'll be able to disable ModSecurity for a certain site or turn on the so-called detection mode in which case the firewall shall still function and record info, but won't do anything to stop possible attacks on your Internet sites. In depth logs will be readily available inside your Control Panel and you will be able to see what sort of attacks happened, what security rules were triggered and how the firewall handled the threats, what IP addresses the attacks originated from, etcetera. We employ two sorts of rules on our servers - commercial ones from an organization that operates in the field of web security, and custom made ones which our administrators occasionally add to respond to newly discovered risks on time.

ModSecurity in VPS Hosting

All virtual private servers which are provided with the Hepsia Control Panel include ModSecurity. The firewall is set up and turned on by default for all domains that are hosted on the web server, so there won't be anything special which you'll need to do to protect your websites. It will take you only a mouse click to stop ModSecurity if necessary or to switch on its passive mode so that it records what goes on without taking any measures to stop intrusions. You'll be able to look at the logs generated in active or passive mode through the corresponding section of Hepsia and discover more about the form of the attack, where it came from, what rule the firewall used to take care of it, etcetera. We employ a mixture of commercial and custom rules so as to make sure that ModSecurity will block as many threats as possible, hence enhancing the security of your web apps as much as possible.

ModSecurity in Dedicated Web Hosting

When you decide to host your websites on a dedicated server with the Hepsia Control Panel, your web applications shall be secured right away as ModSecurity is provided with all Hepsia-based packages. You shall be able to manage the firewall effortlessly and if needed, you'll be able to turn it off or switch on its passive mode when it will only maintain a log of what's occurring without taking any action to stop possible attacks. The logs which you'll find in the exact same section of the CP are quite detailed and contain data about the attacker IP address, what website and file were attacked and in what way, what rule the firewall employed to stop the intrusion, etc. This information shall allow you to take measures and increase the security of your Internet sites even more. To be on the safe side, we use not only commercial rules, but also custom-made ones that our admins add every time they recognize attacks that have not yet been included inside the commercial pack.