ModSecurity is a highly effective web app layer firewall for Apache web servers. It monitors the entire HTTP traffic to a website without affecting its functionality and when it identifies an intrusion attempt, it blocks it. The firewall furthermore keeps a more thorough log for the website visitors than any web server does, so you will manage to keep an eye on what's happening with your sites better than if you rely simply on conventional logs. ModSecurity employs security rules based on which it stops attacks. For instance, it recognizes if someone is trying to log in to the administration area of a specific script several times or if a request is sent to execute a file with a specific command. In such situations these attempts trigger the corresponding rules and the firewall software hinders the attempts instantly, and then records detailed info about them in its logs. ModSecurity is amongst the very best software firewalls available and it could easily protect your web apps against many threats and vulnerabilities, especially if you don’t update them or their plugins often.

ModSecurity in Shared Web Hosting

We offer ModSecurity with all shared web hosting solutions, so your Internet applications shall be resistant to malicious attacks. The firewall is turned on as standard for all domains and subdomains, but if you would like, you will be able to stop it via the respective part of your Hepsia Control Panel. You can also switch on a detection mode, so ModSecurity shall keep a log as intended, but will not take any action. The logs that you will find inside Hepsia are extremely detailed and offer info about the nature of any attack, when it took place and from what IP, the firewall rule which was triggered, etc. We use a range of commercial rules which are often updated, but sometimes our administrators include custom rules as well so as to better protect the websites hosted on our servers.