ModSecurity is a plugin for Apache web servers which acts as a web app layer firewall. It's used to stop attacks against script-driven websites through the use of security rules which contain particular expressions. In this way, the firewall can stop hacking and spamming attempts and shield even websites which are not updated frequently. As an example, several failed login attempts to a script administrative area or attempts to execute a specific file with the objective to get access to the script shall trigger particular rules, so ModSecurity shall stop these activities the moment it identifies them. The firewall is very efficient as it tracks the entire HTTP traffic to a website in real time without slowing it down, so it can easily prevent an attack before any damage is done. It additionally maintains a very detailed log of all attack attempts that features more information than traditional Apache logs, so you could later examine the data and take additional measures to enhance the security of your websites if required.

ModSecurity in Shared Website Hosting

We offer ModSecurity with all shared website hosting plans, so your web applications shall be shielded from destructive attacks. The firewall is activated by default for all domains and subdomains, but if you'd like, you'll be able to stop it via the respective area of your Hepsia Control Panel. You could also activate a detection mode, so ModSecurity shall keep a log as intended, but shall not take any action. The logs which you will find within Hepsia are extremely detailed and feature data about the nature of any attack, when it took place and from what IP address, the firewall rule which was triggered, etcetera. We employ a set of commercial rules which are constantly updated, but sometimes our admins include custom rules as well so as to better protect the Internet sites hosted on our machines.

ModSecurity in Semi-dedicated Hosting

We have incorporated ModSecurity as a standard in all semi-dedicated hosting products, so your web applications shall be protected as soon as you set them up under any domain or subdomain. The Hepsia Control Panel which is included with the semi-dedicated accounts will permit you to switch on or turn off the firewall for any website with a mouse click. You will also be able to turn on a passive detection mode in which ModSecurity will keep a log of potential attacks without really stopping them. The comprehensive logs include things like the nature of the attack and what ModSecurity response that attack triggered, where it came from, and so forth. The list of rules we employ is regularly updated in order to match any new risks which could appear on the Internet and it consists of both commercial rules that we get from a security business and custom-written ones which our admins add if they discover a threat that's not present in the commercial list yet.

ModSecurity in VPS

All virtual private servers that are offered with the Hepsia Control Panel come with ModSecurity. The firewall is installed and switched on by default for all domains that are hosted on the machine, so there will not be anything special that you'll have to do to protect your Internet sites. It will take you simply a click to stop ModSecurity if required or to activate its passive mode so that it records what goes on without taking any steps to stop intrusions. You shall be able to look at the logs produced in active or passive mode via the corresponding section of Hepsia and learn more about the type of the attack, where it came from, what rule the firewall employed to handle it, and so forth. We employ a mixture of commercial and custom rules so as to ensure that ModSecurity will stop as many threats as possible, hence improving the security of your web apps as much as possible.

ModSecurity in Dedicated Hosting

When you choose to host your Internet sites on a dedicated server with the Hepsia CP, your web apps will be protected straight away because ModSecurity is available with all Hepsia-based packages. You shall be able to regulate the firewall effortlessly and if necessary, you will be able to turn it off or switch on its passive mode when it will only keep a log of what is happening without taking any action to stop possible attacks. The logs which you will find within the exact same section of the CP are extremely detailed and contain data about the attacker IP address, what site and file were attacked and in what way, what rule the firewall used to stop the intrusion, etc. This info will permit you to take measures and improve the security of your Internet sites even more. To be on the safe side, we use not just commercial rules, but also custom-made ones that our staff include every time they recognize attacks which haven't yet been included inside the commercial pack.