ModSecurity is a plugin for Apache web servers which functions as a web application layer firewall. It's used to prevent attacks against script-driven sites by employing security rules that contain certain expressions. That way, the firewall can block hacking and spamming attempts and protect even websites that are not updated frequently. For instance, numerous unsuccessful login attempts to a script admin area or attempts to execute a specific file with the intention to get access to the script will trigger certain rules, so ModSecurity shall stop these activities the second it discovers them. The firewall is very efficient because it monitors the whole HTTP traffic to a site in real time without slowing it down, so it could stop an attack before any harm is done. It furthermore maintains a very comprehensive log of all attack attempts which features more information than typical Apache logs, so you could later examine the data and take further measures to improve the security of your sites if necessary.

ModSecurity in Web Hosting

ModSecurity can be found with every web hosting plan that we provide and it's turned on by default for any domain or subdomain that you add through your Hepsia CP. In the event that it interferes with any of your programs or you would like to disable it for some reason, you will be able to do that through the ModSecurity area of Hepsia with merely a click. You can also use a passive mode, so the firewall will recognize possible attacks and keep a log, but won't take any action. You could see extensive logs in the same section, including the IP where the attack originated from, exactly what the attacker tried to do and at what time, what ModSecurity did, and so on. For maximum protection of our clients we use a set of commercial firewall rules combined with custom ones that are added by our system administrators.

ModSecurity in Semi-dedicated Hosting

ModSecurity is a part of our semi-dedicated hosting plans and if you choose to host your websites with our company, there will not be anything special you'll have to do given that the firewall is turned on by default for all domains and subdomains which you add via your hosting Control Panel. If needed, you can disable ModSecurity for a given site or switch on the so-called detection mode in which case the firewall shall still operate and record info, but won't do anything to prevent potential attacks on your Internet sites. In depth logs shall be readily available within your CP and you shall be able to see what sort of attacks took place, what security rules were triggered and how the firewall addressed the threats, what IP addresses the attacks originated from, and so forth. We use 2 sorts of rules on our servers - commercial ones from a firm that operates in the field of web security, and custom ones that our admins occasionally include to respond to newly found threats on time.

ModSecurity in VPS

All virtual private servers that are set up with the Hepsia Control Panel feature ModSecurity. The firewall is installed and activated by default for all domains which are hosted on the machine, so there won't be anything special which you shall have to do to protect your Internet sites. It shall take you a mouse click to stop ModSecurity if needed or to turn on its passive mode so that it records what happens without taking any steps to stop intrusions. You will be able to view the logs generated in active or passive mode via the corresponding section of Hepsia and discover more about the form of the attack, where it originated from, what rule the firewall employed to handle it, etc. We employ a mixture of commercial and custom rules so as to make certain that ModSecurity will block out as many risks as possible, thus enhancing the security of your web programs as much as possible.

ModSecurity in Dedicated Hosting

ModSecurity is provided with all dedicated servers that are set up with our Hepsia CP and you won't need to do anything specific on your end to use it since it's turned on by default each time you include a new domain or subdomain on your web server. If it interferes with some of your programs, you'll be able to stop it via the respective part of Hepsia, or you could leave it working in passive mode, so it'll recognize attacks and will still maintain a log for them, but will not stop them. You'll be able to examine the logs later to learn what you can do to boost the safety of your Internet sites since you shall find information such as where an intrusion attempt came from, what site was attacked and based upon what rule ModSecurity reacted, and so forth. The rules which we use are commercial, hence they're regularly updated by a security company, but to be on the safe side, our admins also add custom rules from time to time in order to deal with any new threats they have discovered.