ModSecurity is a powerful web application layer firewall for Apache web servers. It monitors the whole HTTP traffic to an Internet site without affecting its overall performance and in case it discovers an intrusion attempt, it blocks it. The firewall furthermore maintains a more detailed log for the website visitors than any web server does, so you shall be able to monitor what is going on with your Internet sites better than if you rely merely on standard logs. ModSecurity works with security rules based on which it helps prevent attacks. For example, it recognizes if somebody is attempting to log in to the administration area of a certain script several times or if a request is sent to execute a file with a specific command. In such instances these attempts trigger the corresponding rules and the firewall hinders the attempts right away, then records in-depth details about them within its logs. ModSecurity is among the best software firewalls out there and it can protect your web applications against a large number of threats and vulnerabilities, especially in case you don’t update them or their plugins regularly.

ModSecurity in Shared Website Hosting

ModSecurity is supplied with all shared website hosting machines, so if you choose to host your Internet sites with our firm, they shall be protected against a wide range of attacks. The firewall is turned on by default for all domains and subdomains, so there will be nothing you shall need to do on your end. You shall be able to stop ModSecurity for any Internet site if needed, or to switch on a detection mode, so all activity will be recorded, but the firewall won't take any real action. You'll be able to view comprehensive logs via your Hepsia Control Panel including the IP where the attack came from, what the attacker wanted to do and how ModSecurity handled the threat. Since we take the security of our customers' sites seriously, we use a group of commercial rules that we take from one of the top firms that maintain this kind of rules. Our admins also add custom rules to ensure that your websites will be shielded from as many threats as possible.