ModSecurity is a powerful firewall for Apache web servers that is used to prevent attacks toward web applications. It keeps track of the HTTP traffic to a given website in real time and prevents any intrusion attempts the instant it detects them. The firewall relies on a set of rules to accomplish that - for example, attempting to log in to a script administration area without success several times activates one rule, sending a request to execute a certain file that may result in accessing the Internet site triggers a different rule, and so on. ModSecurity is one of the best firewalls out there and it will protect even scripts that aren't updated frequently because it can prevent attackers from using known exploits and security holes. Incredibly thorough information about every intrusion attempt is recorded and the logs the firewall maintains are much more specific than the regular logs created by the Apache server, so you could later examine them and decide whether you need to take more measures in order to increase the security of your script-driven sites.

ModSecurity in Shared Hosting

ModSecurity comes by default with all shared hosting plans that we provide and it shall be turned on automatically for any domain or subdomain you add/create inside your Hepsia hosting Control Panel. The firewall has three different modes, so you could activate and disable it with a mouse click or set it to detection mode, so it'll keep a log of all attacks, but it'll not do anything to stop them. The log for each of your sites shall contain in-depth info including the nature of the attack, where it originated from, what action was taken by ModSecurity, and so on. The firewall rules we use are regularly updated and consist of both commercial ones which we get from a third-party security business and custom ones our system administrators include in the event that they detect a new kind of attacks. That way, the sites you host here shall be way more protected without any action needed on your end.

ModSecurity in Semi-dedicated Hosting

ModSecurity is part of our semi-dedicated hosting plans and if you opt to host your websites with our company, there shall not be anything special you will have to do given that the firewall is switched on by default for all domains and subdomains you add through your hosting Control Panel. If necessary, you can disable ModSecurity for a given website or enable the so-called detection mode in which case the firewall shall still function and record info, but shall not do anything to prevent possible attacks on your Internet sites. In depth logs will be readily available inside your CP and you shall be able to see what type of attacks happened, what security rules were triggered and how the firewall addressed the threats, what IP addresses the attacks originated from, and so forth. We use two kinds of rules on our servers - commercial ones from an organization that operates in the field of web security, and customized ones which our administrators sometimes include to respond to newly found threats in a timely manner.

ModSecurity in VPS

All virtual private servers which are provided with the Hepsia Control Panel come with ModSecurity. The firewall is set up and turned on by default for all domains which are hosted on the server, so there will not be anything special which you'll need to do to protect your sites. It'll take you simply a mouse click to stop ModSecurity if necessary or to switch on its passive mode so that it records what happens without taking any actions to stop intrusions. You'll be able to see the logs generated in passive or active mode through the corresponding section of Hepsia and learn more about the form of the attack, where it came from, what rule the firewall employed to deal with it, etc. We use a mixture of commercial and custom rules in order to make sure that ModSecurity shall block out as many risks as possible, hence increasing the protection of your web applications as much as possible.

ModSecurity in Dedicated Hosting

ModSecurity is provided with all dedicated servers that are set up with our Hepsia Control Panel and you'll not have to do anything specific on your end to employ it since it's activated by default whenever you add a new domain or subdomain on your hosting server. In case it interferes with any of your applications, you shall be able to stop it through the respective section of Hepsia, or you can leave it working in passive mode, so it'll identify attacks and will still maintain a log for them, but won't block them. You could analyze the logs later to find out what you can do to improve the safety of your websites since you shall find info such as where an intrusion attempt came from, what website was attacked and based upon what rule ModSecurity responded, etc. The rules which we use are commercial, hence they're constantly updated by a security firm, but to be on the safe side, our admins also include custom rules once in a while in order to respond to any new threats they have discovered.