ModSecurity is an efficient firewall for Apache web servers which is employed to stop attacks against web applications. It monitors the HTTP traffic to a certain website in real time and stops any intrusion attempts the moment it detects them. The firewall uses a set of rules to accomplish that - for example, attempting to log in to a script administrator area without success several times sets off one rule, sending a request to execute a certain file which could result in getting access to the site triggers a different rule, and so on. ModSecurity is amongst the best firewalls around and it'll protect even scripts which are not updated regularly as it can prevent attackers from using known exploits and security holes. Incredibly comprehensive data about every single intrusion attempt is recorded and the logs the firewall keeps are considerably more comprehensive than the regular logs generated by the Apache server, so you can later analyze them and decide if you need to take more measures in order to enhance the security of your script-driven sites.

ModSecurity in Shared Hosting

ModSecurity is available with each and every shared hosting package that we offer and it's turned on by default for every domain or subdomain which you include through your Hepsia CP. In case it disrupts any of your apps or you would like to disable it for some reason, you will be able to accomplish that through the ModSecurity area of Hepsia with simply a click. You could also activate a passive mode, so the firewall will identify potential attacks and maintain a log, but shall not take any action. You could view comprehensive logs in the very same section, including the IP address where the attack came from, what precisely the attacker tried to do and at what time, what ModSecurity did, and so on. For maximum safety of our customers we use a group of commercial firewall rules mixed with custom ones which are added by our system administrators.

ModSecurity in Semi-dedicated Hosting

We have included ModSecurity by default in all semi-dedicated hosting packages, so your web apps shall be protected whenever you set them up under any domain or subdomain. The Hepsia Control Panel which comes with the semi-dedicated accounts will permit you to enable or turn off the firewall for any site with a mouse click. You shall also have the ability to switch on a passive detection mode through which ModSecurity shall keep a log of potential attacks without actually stopping them. The detailed logs include the nature of the attack and what ModSecurity response that attack activated, where it came from, and so forth. The list of rules that we use is regularly updated as to match any new threats which could appear on the Internet and it consists of both commercial rules that we get from a security firm and custom-written ones which our administrators add if they find a threat that is not present within the commercial list yet.

ModSecurity in VPS Web Hosting

ModSecurity is provided with all Hepsia-based virtual private servers which we offer and it will be turned on automatically for every new domain or subdomain which you add on the machine. In this way, any web app which you install shall be protected right from the start without doing anything by hand on your end. The firewall could be handled through the section of the Control Panel which bears the same name. This is the place in whichyou can disable ModSecurity or let its passive mode, so it shall not take any action toward threats, but will still keep a detailed log. The recorded info is available inside the same area as well and you will be able to see what IPs any attacks originated from so that you stop them, what the nature of the attempted attacks was and in accordance with what security rules ModSecurity reacted. The rules that we use on our servers are a mixture between commercial ones that we obtain from a security company and custom ones which are added by our administrators to maximize the security of any web apps hosted on our end.

ModSecurity in Dedicated Servers Hosting

ModSecurity comes with all dedicated servers which are integrated with our Hepsia Control Panel and you will not need to do anything specific on your end to employ it because it is activated by default every time you add a new domain or subdomain on your hosting server. In the event that it disrupts some of your apps, you'll be able to stop it via the respective part of Hepsia, or you could leave it operating in passive mode, so it'll detect attacks and will still keep a log for them, but shall not block them. You'll be able to look at the logs later to determine what you can do to boost the protection of your websites as you shall find details such as where an intrusion attempt originated from, what website was attacked and based on what rule ModSecurity reacted, etc. The rules we use are commercial, thus they are constantly updated by a security firm, but to be on the safe side, our staff also include custom rules once in a while in order to deal with any new threats they have found.