ModSecurity is a plugin for Apache web servers that functions as a web application layer firewall. It is employed to prevent attacks against script-driven sites by using security rules which contain particular expressions. That way, the firewall can stop hacking and spamming attempts and protect even Internet sites which are not updated frequently. For example, a number of unsuccessful login attempts to a script administrative area or attempts to execute a certain file with the intention to get access to the script will trigger certain rules, so ModSecurity will block out these activities the moment it detects them. The firewall is very efficient because it tracks the entire HTTP traffic to a website in real time without slowing it down, so it will be able to stop an attack before any damage is done. It also keeps an incredibly comprehensive log of all attack attempts that features more info than conventional Apache logs, so you can later analyze the data and take additional measures to boost the security of your sites if necessary.

ModSecurity in Shared Hosting

ModSecurity can be found with every shared hosting solution which we offer and it's switched on by default for any domain or subdomain that you include through your Hepsia Control Panel. In case it disrupts any of your applications or you would like to disable it for some reason, you'll be able to do this through the ModSecurity section of Hepsia with merely a click. You could also use a passive mode, so the firewall will detect potential attacks and maintain a log, but shall not take any action. You can view comprehensive logs in the very same section, including the IP address where the attack came from, what precisely the attacker attempted to do and at what time, what ModSecurity did, etcetera. For maximum security of our clients we use a group of commercial firewall rules blended with custom ones which are added by our system admins.

ModSecurity in Semi-dedicated Hosting

We've integrated ModSecurity by default inside all semi-dedicated hosting products, so your web applications shall be protected the instant you set them up under any domain or subdomain. The Hepsia Control Panel that comes with the semi-dedicated accounts will allow you to activate or disable the firewall for any website with a mouse click. You shall also have the ability to switch on a passive detection mode with which ModSecurity shall maintain a log of possible attacks without really stopping them. The detailed logs contain the nature of the attack and what ModSecurity response that attack generated, where it originated from, etcetera. The list of rules we employ is regularly updated as to match any new risks that may appear on the Internet and it features both commercial rules that we get from a security business and custom-written ones that our admins include in the event that they find a threat that is not present inside the commercial list yet.

ModSecurity in VPS Web Hosting

All virtual private servers that are set up with the Hepsia Control Panel come with ModSecurity. The firewall is installed and activated by default for all domains that are hosted on the web server, so there won't be anything special that you will have to do to protect your websites. It'll take you just a mouse click to stop ModSecurity if necessary or to activate its passive mode so that it records what occurs without taking any measures to stop intrusions. You'll be able to see the logs produced in active or passive mode from the corresponding section of Hepsia and learn more about the type of the attack, where it originated from, what rule the firewall used to handle it, and so on. We use a mix of commercial and custom rules in order to make sure that ModSecurity will block out as many threats as possible, consequently boosting the protection of your web applications as much as possible.

ModSecurity in Dedicated Servers Hosting

ModSecurity is included with all dedicated servers that are set up with our Hepsia CP and you won't have to do anything specific on your end to employ it as it's activated by default whenever you include a new domain or subdomain on your server. In the event that it interferes with any of your programs, you'll be able to stop it through the respective area of Hepsia, or you could leave it in passive mode, so it shall identify attacks and shall still maintain a log for them, but will not stop them. You could analyze the logs later to learn what you can do to improve the security of your sites as you'll find information such as where an intrusion attempt came from, what Internet site was attacked and based upon what rule ModSecurity responded, and so forth. The rules that we employ are commercial, thus they are regularly updated by a security company, but to be on the safe side, our staff also add custom rules from time to time as to deal with any new threats they have identified.