ModSecurity is a plugin for Apache web servers which functions as a web application layer firewall. It's used to stop attacks toward script-driven Internet sites by employing security rules which contain certain expressions. That way, the firewall can block hacking and spamming attempts and protect even websites that are not updated often. For instance, numerous unsuccessful login attempts to a script administrative area or attempts to execute a specific file with the intention to get access to the script will trigger specific rules, so ModSecurity will block these activities the instant it detects them. The firewall is quite efficient as it monitors the whole HTTP traffic to a site in real time without slowing it down, so it will be able to stop an attack before any harm is done. It furthermore keeps a very thorough log of all attack attempts that includes more info than conventional Apache logs, so you can later check out the data and take additional measures to increase the security of your websites if required.

ModSecurity in Web Hosting

ModSecurity can be found with every web hosting plan that we provide and it is activated by default for any domain or subdomain which you add through your Hepsia Control Panel. In the event that it interferes with any of your applications or you'd like to disable it for whatever reason, you shall be able to achieve that through the ModSecurity area of Hepsia with merely a click. You could also enable a passive mode, so the firewall will discover potential attacks and maintain a log, but shall not take any action. You can see extensive logs in the exact same section, including the IP where the attack came from, exactly what the attacker attempted to do and at what time, what ModSecurity did, etc. For maximum security of our clients we use a set of commercial firewall rules combined with custom ones that are provided by our system administrators.

ModSecurity in Semi-dedicated Hosting

Any web app that you install within your new semi-dedicated hosting account shall be protected by ModSecurity as the firewall comes with all our hosting solutions and is activated by default for any domain and subdomain that you include or create using your Hepsia hosting CP. You will be able to manage ModSecurity through a dedicated area within Hepsia where not only could you activate or deactivate it completely, but you can also enable a passive mode, so the firewall shall not block anything, but it will still keep a record of potential attacks. This takes just a mouse click and you shall be able to see the logs regardless if ModSecurity is in passive or active mode through the same section - what the attack was and where it came from, how it was addressed, and so on. The firewall uses two sets of rules on our machines - a commercial one that we get from a third-party web security provider and a custom one that our administrators update personally in order to respond to recently discovered threats at the earliest opportunity.

ModSecurity in Dedicated Servers Hosting

All our dedicated servers which are set up with the Hepsia hosting Control Panel include ModSecurity, so any application you upload or install will be properly secured from the very beginning and you'll not need to worry about common attacks or vulnerabilities. A separate section inside Hepsia will permit you to start or stop the firewall for any domain or subdomain, or switch on a detection mode so that it records information about intrusions, but doesn't take actions to stop them. What you shall find in the logs can enable you to to secure your websites better - the IP an attack came from, what site was attacked and in what way, what ModSecurity rule was triggered, etc. With this data, you can see if a website needs an update, whether you ought to block IPs from accessing your server, and so on. Aside from the third-party commercial security rules for ModSecurity that we use, our admins add custom ones as well every time they come across a new threat that's not yet in the commercial bundle.