ModSecurity is a plugin for Apache web servers which acts as a web application layer firewall. It is employed to stop attacks towards script-driven sites through the use of security rules that contain certain expressions. This way, the firewall can stop hacking and spamming attempts and preserve even websites that are not updated often. For instance, several unsuccessful login attempts to a script administrative area or attempts to execute a particular file with the objective to get access to the script shall trigger specific rules, so ModSecurity will block out these activities the second it identifies them. The firewall is very efficient since it screens the entire HTTP traffic to a website in real time without slowing it down, so it can easily prevent an attack before any damage is done. It furthermore keeps an incredibly comprehensive log of all attack attempts which features more information than typical Apache logs, so you could later examine the data and take further measures to boost the security of your sites if needed.

ModSecurity in Shared Web Hosting

We offer ModSecurity with all shared web hosting plans, so your Internet apps shall be shielded from harmful attacks. The firewall is turned on by default for all domains and subdomains, but in case you'd like, you will be able to stop it using the respective area of your Hepsia CP. You could also switch on a detection mode, so ModSecurity shall keep a log as intended, but will not take any action. The logs which you'll discover in Hepsia are incredibly detailed and include data about the nature of any attack, when it transpired and from what IP address, the firewall rule that was triggered, etcetera. We use a group of commercial rules that are often updated, but sometimes our admins add custom rules as well so as to better protect the Internet sites hosted on our machines.

ModSecurity in Semi-dedicated Hosting

ModSecurity is a part of our semi-dedicated hosting plans and if you decide to host your sites with us, there will not be anything special you'll need to do since the firewall is turned on by default for all domains and subdomains which you add using your hosting Control Panel. If necessary, you'll be able to disable ModSecurity for a certain website or activate the so-called detection mode in which case the firewall shall still function and record data, but won't do anything to stop possible attacks against your sites. Detailed logs will be available in your Control Panel and you shall be able to see what type of attacks took place, what security rules were triggered and how the firewall dealt with the threats, what Internet protocol addresses the attacks originated from, and so on. We use 2 types of rules on our servers - commercial ones from a business that operates in the field of web security, and custom made ones that our admins sometimes add to respond to newly identified risks on time.

ModSecurity in VPS

ModSecurity is pre-installed on all virtual private servers which are offered with the Hepsia hosting CP, so your web programs will be secured from the moment your server is ready. The firewall is switched on by default for any domain or subdomain on the VPS, but if needed, you'll be able to deactivate it with a click of your mouse from the corresponding section of Hepsia. You can also set it to work in detection mode, so it will maintain a comprehensive log of any possible attacks without taking any action to stop them. The logs can be found within the very same section and offer information regarding the nature of the attack, what IP address it came from and what ModSecurity rule was initiated to stop it. For maximum security, we employ not simply commercial rules from a firm working in the field of web security, but also custom ones which our admins include personally in order to react to new risks that are still not addressed in the commercial rules.

ModSecurity in Dedicated Hosting

ModSecurity comes with all dedicated servers which are set up with our Hepsia Control Panel and you will not need to do anything specific on your end to use it because it's switched on by default each time you add a new domain or subdomain on your hosting server. In the event that it interferes with any of your apps, you shall be able to stop it via the respective section of Hepsia, or you may leave it in passive mode, so it'll detect attacks and will still keep a log for them, but will not prevent them. You could look at the logs later to determine what you can do to enhance the protection of your Internet sites as you'll find information such as where an intrusion attempt came from, what site was attacked and based upon what rule ModSecurity responded, and so forth. The rules which we use are commercial, hence they are frequently updated by a security firm, but to be on the safe side, our administrators also add custom rules occasionally as to react to any new threats they have identified.