ModSecurity is an efficient firewall for Apache web servers that is employed to prevent attacks against web applications. It tracks the HTTP traffic to a certain website in real time and prevents any intrusion attempts the moment it identifies them. The firewall relies on a set of rules to accomplish that - for example, attempting to log in to a script administrator area unsuccessfully several times sets off one rule, sending a request to execute a certain file that may result in accessing the Internet site triggers a different rule, etc. ModSecurity is amongst the best firewalls available and it will protect even scripts which are not updated on a regular basis because it can prevent attackers from employing known exploits and security holes. Incredibly detailed information about each intrusion attempt is recorded and the logs the firewall keeps are considerably more specific than the standard logs provided by the Apache server, so you may later examine them and decide whether you need to take additional measures so as to enhance the safety of your script-driven websites.

ModSecurity in Shared Website Hosting

We provide ModSecurity with all shared website hosting plans, so your web apps shall be shielded from destructive attacks. The firewall is turned on by default for all domains and subdomains, but if you would like, you shall be able to stop it via the respective section of your Hepsia Control Panel. You can also activate a detection mode, so ModSecurity will keep a log as intended, but will not take any action. The logs which you will find in Hepsia are extremely detailed and offer information about the nature of any attack, when it took place and from what IP, the firewall rule which was triggered, and so on. We use a set of commercial rules that are often updated, but sometimes our admins include custom rules as well so as to better protect the sites hosted on our servers.

ModSecurity in Semi-dedicated Servers

All semi-dedicated server solutions that we offer include ModSecurity and given that the firewall is turned on by default, any Internet site that you create under a domain or a subdomain shall be protected right from the start. An independent section inside the Hepsia Control Panel which comes with the semi-dedicated accounts is devoted to ModSecurity and it shall enable you to stop and start the firewall for any website or switch on a detection mode. With the last mentioned, ModSecurity will not take any action, but it shall still recognize possible attacks and will keep all data in a log as if it were completely active. The logs can be found in the same section of the Control Panel and they include information about the IP where an attack came from, what its nature was, what rule ModSecurity applies to identify and stop it, and so on. The security rules that we employ on our servers are a mix between commercial ones from a security firm and custom ones created by our system administrators. Therefore, we offer higher security for your web programs as we can shield them from attacks even before security firms release updates for completely new threats.

ModSecurity in VPS Servers

All VPS servers that are set up with the Hepsia Control Panel feature ModSecurity. The firewall is installed and switched on by default for all domains that are hosted on the server, so there won't be anything special which you'll have to do to protect your sites. It'll take you a click to stop ModSecurity if necessary or to turn on its passive mode so that it records what occurs without taking any measures to stop intrusions. You will be able to look at the logs produced in passive or active mode from the corresponding section of Hepsia and discover more about the form of the attack, where it came from, what rule the firewall employed to tackle it, and so forth. We employ a mix of commercial and custom rules in order to make certain that ModSecurity will prevent as many risks as possible, consequently boosting the security of your web programs as much as possible.

ModSecurity in Dedicated Servers

If you choose to host your Internet sites on a dedicated server with the Hepsia Control Panel, your web applications shall be secured right away because ModSecurity is supplied with all Hepsia-based plans. You will be able to manage the firewall easily and if necessary, you shall be able to turn it off or switch on its passive mode when it shall only keep a log of what's occurring without taking any action to stop possible attacks. The logs that you can find inside the very same section of the Control Panel are really detailed and feature info about the attacker IP, what site and file were attacked and in what ways, what rule the firewall employed to prevent the intrusion, etc. This data will enable you to take measures and increase the security of your sites even more. To be on the safe side, we use not only commercial rules, but also custom-made ones which our staff include whenever they recognize attacks which haven't yet been included within the commercial pack.