Find out what ModSecurity is in fact, what it does and what actually it can do to defend your websites and web apps.
ModSecurity is a powerful web app layer firewall for Apache web servers. It monitors the whole HTTP traffic to a website without affecting its functionality and in case it detects an intrusion attempt, it prevents it. The firewall furthermore maintains a more detailed log for the site visitors than any web server does, so you'll be able to keep an eye on what's going on with your websites much better than if you rely merely on conventional logs. ModSecurity uses security rules based on which it prevents attacks. For instance, it detects if anyone is trying to log in to the admin area of a certain script a number of times or if a request is sent to execute a file with a certain command. In these circumstances these attempts set off the corresponding rules and the firewall program blocks the attempts right away, after that records in-depth details about them inside its logs. ModSecurity is among the best software firewalls out there and it can easily protect your web applications against thousands of threats and vulnerabilities, especially if you don’t update them or their plugins often.
ModSecurity in Web Hosting
ModSecurity is provided with all web hosting web servers, so if you opt to host your Internet sites with our company, they will be shielded from a wide range of attacks. The firewall is enabled by default for all domains and subdomains, so there will be nothing you will need to do on your end. You shall be able to stop ModSecurity for any website if required, or to enable a detection mode, so that all activity will be recorded, but the firewall shall not take any real action. You shall be able to view specific logs through your Hepsia CP including the IP address where the attack originated from, what the attacker planned to do and how ModSecurity dealt with the threat. Since we take the security of our clients' websites seriously, we employ a set of commercial rules that we get from one of the top companies which maintain this type of rules. Our administrators also add custom rules to ensure that your sites shall be resistant to as many risks as possible.