ModSecurity is an effective firewall for Apache web servers that's employed to prevent attacks towards web applications. It monitors the HTTP traffic to a certain site in real time and prevents any intrusion attempts the moment it discovers them. The firewall uses a set of rules to do that - as an example, trying to log in to a script administrator area unsuccessfully a few times triggers one rule, sending a request to execute a specific file that may result in accessing the site triggers a different rule, and so forth. ModSecurity is amongst the best firewalls out there and it'll protect even scripts which are not updated frequently because it can prevent attackers from using known exploits and security holes. Very detailed data about each and every intrusion attempt is recorded and the logs the firewall maintains are a lot more comprehensive than the conventional logs created by the Apache server, so you can later take a look at them and determine if you need to take more measures so as to increase the protection of your script-driven websites.

ModSecurity in Cloud Hosting

We provide ModSecurity with all cloud hosting solutions, so your web applications will be shielded from malicious attacks. The firewall is turned on as standard for all domains and subdomains, but if you'd like, you will be able to stop it through the respective part of your Hepsia Control Panel. You could also activate a detection mode, so ModSecurity will keep a log as intended, but shall not take any action. The logs that you shall find in Hepsia are incredibly detailed and include information about the nature of any attack, when it took place and from what IP address, the firewall rule which was triggered, etcetera. We employ a group of commercial rules that are constantly updated, but sometimes our administrators include custom rules as well in order to efficiently protect the Internet sites hosted on our servers.

ModSecurity in Semi-dedicated Hosting

Any web app that you set up inside your new semi-dedicated hosting account will be protected by ModSecurity since the firewall is provided with all our hosting packages and is activated by default for any domain and subdomain that you add or create using your Hepsia hosting Control Panel. You'll be able to manage ModSecurity via a dedicated area inside Hepsia where not only can you activate or deactivate it fully, but you can also enable a passive mode, so the firewall won't block anything, but it'll still maintain an archive of potential attacks. This requires just a click and you will be able to view the logs regardless of if ModSecurity is in passive or active mode through the same section - what the attack was and where it originated from, how it was addressed, and so on. The firewall employs two sets of rules on our servers - a commercial one which we get from a third-party web security firm and a custom one that our admins update personally in order to respond to newly discovered threats as fast as possible.

ModSecurity in VPS Hosting

ModSecurity is pre-installed on all virtual private servers which are offered with the Hepsia hosting CP, so your web applications will be protected from the moment your server is ready. The firewall is turned on by default for any domain or subdomain on the VPS, but if needed, you could deactivate it with a click via the corresponding section of Hepsia. You could also set it to work in detection mode, so it will maintain a detailed log of any possible attacks without taking any action to prevent them. The logs can be found in the exact same section and provide information about the nature of the attack, what IP it originated from and what ModSecurity rule was activated to stop it. For maximum security, we employ not simply commercial rules from a company operating in the field of web security, but also custom ones our admins include manually so as to respond to new risks that are still not tackled in the commercial rules.

ModSecurity in Dedicated Web Hosting

If you choose to host your Internet sites on a dedicated server with the Hepsia CP, your web apps shall be secured right from the start as ModSecurity is available with all Hepsia-based packages. You'll be able to manage the firewall without difficulty and if required, you shall be able to turn it off or enable its passive mode when it will only maintain a log of what's taking place without taking any action to prevent possible attacks. The logs that you can find within the very same section of the Control Panel are very detailed and feature info about the attacker IP, what website and file were attacked and in what ways, what rule the firewall used to prevent the intrusion, etcetera. This info shall permit you to take measures and enhance the security of your sites even more. To be on the safe side, we employ not only commercial rules, but also custom-made ones which our staff add when they recognize attacks which have not yet been included in the commercial pack.