ModSecurity
Learn what ModSecurity is really, the way it works and just what it does to defend your web sites and apps.
ModSecurity is a highly effective web app layer firewall for Apache web servers. It monitors the whole HTTP traffic to a website without affecting its overall performance and when it detects an intrusion attempt, it prevents it. The firewall furthermore maintains a more detailed log for the website visitors than any server does, so you'll be able to keep an eye on what is happening with your Internet sites a lot better than if you rely simply on conventional logs. ModSecurity works with security rules based on which it helps prevent attacks. For example, it detects whether somebody is trying to log in to the administration area of a particular script several times or if a request is sent to execute a file with a specific command. In these cases these attempts set off the corresponding rules and the firewall blocks the attempts instantly, then records detailed information about them within its logs. ModSecurity is amongst the best software firewalls on the market and it could easily protect your web apps against many threats and vulnerabilities, particularly if you don’t update them or their plugins frequently.
ModSecurity in Cloud Hosting
ModSecurity comes by default with all cloud hosting solutions which we provide and it will be turned on automatically for any domain or subdomain that you add/create within your Hepsia hosting Control Panel. The firewall has 3 different modes, so you'll be able to activate and disable it with only a click or set it to detection mode, so it'll keep a log of all attacks, but it shall not do anything to prevent them. The log for each of your Internet sites will feature in-depth information such as the nature of the attack, where it originated from, what action was taken by ModSecurity, and so on. The firewall rules which we use are constantly updated and consist of both commercial ones we get from a third-party security company and custom ones our system administrators include in the event that they detect a new sort of attacks. In this way, the Internet sites which you host here shall be far more protected with no action needed on your end.