ModSecurity is a highly effective web app layer firewall for Apache web servers. It monitors the entire HTTP traffic to an Internet site without affecting its functionality and in case it detects an intrusion attempt, it blocks it. The firewall also keeps a more comprehensive log for the traffic than any server does, so you will manage to monitor what's going on with your websites better than if you rely only on standard logs. ModSecurity employs security rules based on which it prevents attacks. For instance, it identifies whether anyone is trying to log in to the administrator area of a specific script a number of times or if a request is sent to execute a file with a particular command. In such situations these attempts set off the corresponding rules and the software hinders the attempts right away, then records detailed info about them in its logs. ModSecurity is among the most effective software firewalls available and it can protect your web apps against thousands of threats and vulnerabilities, especially in case you don’t update them or their plugins regularly.

ModSecurity in Shared Hosting

ModSecurity comes by default with all shared hosting packages which we provide and it'll be activated automatically for any domain or subdomain you add/create within your Hepsia hosting CP. The firewall has three different modes, so you'll be able to activate and disable it with only a click or set it to detection mode, so it shall maintain a log of all attacks, but it shall not do anything to stop them. The log for any of your Internet sites will feature comprehensive info including the nature of the attack, where it came from, what action was taken by ModSecurity, etcetera. The firewall rules which we use are constantly updated and consist of both commercial ones we get from a third-party security firm and custom ones that our system admins include in case that they detect a new type of attacks. In this way, the Internet sites that you host here will be much more secure without any action needed on your end.

ModSecurity in Semi-dedicated Hosting

ModSecurity is part of our semi-dedicated hosting solutions and if you decide to host your sites with us, there shall not be anything special you will have to do given that the firewall is switched on by default for all domains and subdomains you include via your hosting Control Panel. If necessary, you could disable ModSecurity for a particular website or activate the so-called detection mode in which case the firewall shall still function and record information, but won't do anything to prevent potential attacks on your websites. Thorough logs will be readily available in your CP and you shall be able to see what type of attacks took place, what security rules were triggered and how the firewall addressed the threats, what Internet protocol addresses the attacks came from, etcetera. We employ 2 kinds of rules on our servers - commercial ones from a firm which operates in the field of web security, and customized ones that our administrators often include to respond to newly found threats on time.

ModSecurity in VPS Web Hosting

All virtual private servers which are set up with the Hepsia CP include ModSecurity. The firewall is set up and activated by default for all domains which are hosted on the web server, so there won't be anything special that you shall have to do to protect your websites. It shall take you simply a mouse click to stop ModSecurity if needed or to activate its passive mode so that it records what goes on without taking any steps to prevent intrusions. You shall be able to look at the logs created in active or passive mode from the corresponding section of Hepsia and learn more about the form of the attack, where it originated from, what rule the firewall employed to tackle it, and so forth. We employ a combination of commercial and custom rules so as to make certain that ModSecurity shall stop as many threats as possible, therefore enhancing the protection of your web programs as much as possible.

ModSecurity in Dedicated Servers Hosting

All our dedicated servers which are set up with the Hepsia hosting CP feature ModSecurity, so any application you upload or set up will be secured from the very beginning and you will not have to stress about common attacks or vulnerabilities. A separate section in Hepsia will enable you to start or stop the firewall for each domain or subdomain, or switch on a detection mode so that it records info about intrusions, but does not take actions to prevent them. What you shall find in the logs shall help you to secure your websites better - the IP an attack originated from, what site was attacked as well as how, what ModSecurity rule was triggered, etc. With this information, you could see whether a website needs an update, whether you need to block IPs from accessing your web server, and so forth. Besides the third-party commercial security rules for ModSecurity that we use, our admins include custom ones as well every time they find a new threat that is not yet included in the commercial bundle.