ModSecurity is a plugin for Apache web servers which acts as a web app layer firewall. It is employed to stop attacks toward script-driven Internet sites by employing security rules which contain particular expressions. That way, the firewall can prevent hacking and spamming attempts and protect even websites that aren't updated regularly. For example, several unsuccessful login attempts to a script admin area or attempts to execute a particular file with the purpose to get access to the script will trigger certain rules, so ModSecurity shall stop these activities the instant it identifies them. The firewall is quite efficient because it screens the whole HTTP traffic to an Internet site in real time without slowing it down, so it will be able to prevent an attack before any damage is done. It also keeps a very detailed log of all attack attempts that includes more info than conventional Apache logs, so you could later examine the data and take additional measures to increase the security of your sites if required.

ModSecurity in Hosting

ModSecurity is available with every single hosting plan which we provide and it is activated by default for any domain or subdomain which you include through your Hepsia CP. In case it disrupts any of your apps or you would like to disable it for whatever reason, you shall be able to achieve that through the ModSecurity section of Hepsia with only a mouse click. You may also activate a passive mode, so the firewall will detect potential attacks and keep a log, but shall not take any action. You'll be able to see extensive logs in the exact same section, including the IP address where the attack originated from, exactly what the attacker attempted to do and at what time, what ModSecurity did, and so on. For maximum safety of our customers we use a group of commercial firewall rules combined with custom ones which are included by our system admins.

ModSecurity in Semi-dedicated Servers

All semi-dedicated server plans that we offer feature ModSecurity and given that the firewall is switched on by default, any Internet site you create under a domain or a subdomain will be protected right away. A separate section inside the Hepsia Control Panel that comes with the semi-dedicated accounts is dedicated to ModSecurity and it will enable you to start and stop the firewall for any website or switch on a detection mode. With the latter, ModSecurity won't take any action, but it'll still recognize possible attacks and shall keep all data in a log as if it were completely active. The logs can be found within the very same section of the Control Panel and they include specifics about the IP where an attack originated from, what its nature was, what rule ModSecurity applies to identify and stop it, and so on. The security rules that we use on our machines are a mix between commercial ones from a security firm and custom ones created by our system administrators. Therefore, we offer increased security for your web apps as we can shield them from attacks even before security corporations release updates for completely new threats.

ModSecurity in Dedicated Servers

All our dedicated servers that are installed with the Hepsia hosting Control Panel include ModSecurity, so any app which you upload or install will be protected from the very beginning and you won't have to concern yourself with common attacks or vulnerabilities. An individual section inside Hepsia will allow you to start or stop the firewall for each domain or subdomain, or turn on a detection mode so that it records information regarding intrusions, but doesn't take actions to stop them. What you will see in the logs can easily enable you to to secure your Internet sites better - the IP an attack originated from, what website was attacked and in what way, what ModSecurity rule was triggered, etc. With this information, you'll be able to see whether a site needs an update, if you should block IPs from accessing your web server, etcetera. In addition to the third-party commercial security rules for ModSecurity we use, our administrators add custom ones too every time they discover a new threat that's not yet included in the commercial bundle.