ModSecurity

Learn what ModSecurity is in fact, how it operates and exactly what it does to defend your sites and apps.

ModSecurity is a highly effective firewall for Apache web servers that is employed to prevent attacks towards web applications. It monitors the HTTP traffic to a certain site in real time and stops any intrusion attempts the instant it discovers them. The firewall relies on a set of rules to do this - for example, trying to log in to a script admin area without success a few times triggers one rule, sending a request to execute a certain file that may result in gaining access to the website triggers a different rule, etc. ModSecurity is one of the best firewalls on the market and it will preserve even scripts that aren't updated regularly as it can prevent attackers from employing known exploits and security holes. Very thorough info about each and every intrusion attempt is recorded and the logs the firewall keeps are far more comprehensive than the conventional logs created by the Apache server, so you may later examine them and decide if you need to take additional measures in order to increase the security of your script-driven sites.

: ModSecurity in Semi-dedicated Hosting

All semi-dedicated hosting packages that we offer feature ModSecurity and given that the firewall is switched on by default, any Internet site which you build under a domain or a subdomain will be protected immediately. A separate section within the Hepsia Control Panel that comes with the semi-dedicated accounts is devoted to ModSecurity and it will enable you to start and stop the firewall for any Internet site or activate a detection mode. With the latter, ModSecurity shall not take any action, but it will still recognize possible attacks and will keep all info inside a log as if it were 100% active. The logs could be found inside the very same section of the CP and they offer information about the IP where an attack came from, what its nature was, what rule ModSecurity applies to detect and stop it, etcetera. The security rules which we employ on our web servers are a mix of commercial ones from a security firm and custom ones created by our system admins. Consequently, we offer greater security for your web applications as we can shield them from attacks before security businesses release updates for new threats.