ModSecurity is an efficient firewall for Apache web servers that's used to prevent attacks against web applications. It tracks the HTTP traffic to a particular Internet site in real time and prevents any intrusion attempts the moment it detects them. The firewall uses a set of rules to do this - for instance, trying to log in to a script administration area without success several times sets off one rule, sending a request to execute a particular file that may result in accessing the Internet site triggers another rule, etc. ModSecurity is among the best firewalls on the market and it'll secure even scripts that aren't updated frequently since it can prevent attackers from using known exploits and security holes. Quite detailed information about every intrusion attempt is recorded and the logs the firewall keeps are considerably more comprehensive than the regular logs created by the Apache server, so you could later analyze them and decide whether you need to take additional measures so as to increase the protection of your script-driven Internet sites.

ModSecurity in Web Hosting

We offer ModSecurity with all web hosting plans, so your Internet applications will be shielded from destructive attacks. The firewall is turned on by default for all domains and subdomains, but if you would like, you shall be able to stop it using the respective area of your Hepsia Control Panel. You'll be able to also switch on a detection mode, so ModSecurity will keep a log as intended, but shall not take any action. The logs that you'll discover within Hepsia are extremely detailed and include information about the nature of any attack, when it occurred and from what IP, the firewall rule that was triggered, and so forth. We use a group of commercial rules which are constantly updated, but sometimes our administrators include custom rules as well in order to better protect the Internet sites hosted on our servers.

ModSecurity in Semi-dedicated Hosting

We've integrated ModSecurity by default in all semi-dedicated hosting plans, so your web apps will be protected whenever you install them under any domain or subdomain. The Hepsia Control Panel that is included with the semi-dedicated accounts will permit you to switch on or turn off the firewall for any site with a click. You will also be able to turn on a passive detection mode through which ModSecurity will maintain a log of potential attacks without actually stopping them. The thorough logs include things like the nature of the attack and what ModSecurity response that attack initiated, where it came from, etcetera. The list of rules that we employ is constantly updated in order to match any new risks that might appear on the Internet and it consists of both commercial rules that we get from a security corporation and custom-written ones that our admins add in the event that they find a threat that is not present in the commercial list yet.

ModSecurity in VPS Hosting

ModSecurity comes with all Hepsia-based virtual private servers which we offer and it will be activated automatically for any new domain or subdomain you add on the hosting server. This way, any web app you install shall be protected right away without doing anything manually on your end. The firewall could be handled through the section of the CP which bears the same name. This is the location whereyou could turn off ModSecurity or enable its passive mode, so it won't take any action towards threats, but will still keep a detailed log. The recorded information is available inside the same section as well and you shall be able to see what IPs any attacks originated from to enable you to stop them, what the nature of the attempted attacks was and in accordance with what security rules ModSecurity reacted. The rules which we employ on our servers are a blend between commercial ones we obtain from a security company and custom ones that are included by our admins to optimize the protection of any web applications hosted on our end.

ModSecurity in Dedicated Web Hosting

ModSecurity comes with all dedicated servers which are set up with our Hepsia CP and you'll not need to do anything specific on your end to use it as it's activated by default each time you include a new domain or subdomain on your web server. In case it disrupts any of your apps, you'll be able to stop it through the respective area of Hepsia, or you may leave it in passive mode, so it shall identify attacks and shall still maintain a log for them, but will not block them. You may look at the logs later to learn what you can do to enhance the security of your websites as you'll find information such as where an intrusion attempt originated from, what website was attacked and based upon what rule ModSecurity reacted, and so on. The rules that we employ are commercial, therefore they're frequently updated by a security firm, but to be on the safe side, our administrators also include custom rules from time to time in order to respond to any new threats they have discovered.