Learn what ModSecurity is, how it works and what exactly it does so as to protect your Internet sites and applications.
ModSecurity is a plugin for Apache web servers that functions as a web app layer firewall. It is used to prevent attacks toward script-driven websites by employing security rules that contain particular expressions. In this way, the firewall can stop hacking and spamming attempts and protect even sites that aren't updated regularly. For example, a number of unsuccessful login attempts to a script administrator area or attempts to execute a specific file with the purpose to get access to the script will trigger particular rules, so ModSecurity will stop these activities the moment it identifies them. The firewall is extremely efficient as it tracks the entire HTTP traffic to a site in real time without slowing it down, so it can easily stop an attack before any harm is done. It additionally maintains an exceptionally thorough log of all attack attempts that features more info than standard Apache logs, so you can later examine the data and take extra measures to enhance the security of your Internet sites if required.
ModSecurity in Web Hosting
ModSecurity is available on all web hosting
web servers, so if you decide to host your Internet sites with our company, they will be protected against a wide array of attacks. The firewall is enabled by default for all domains and subdomains, so there'll be nothing you'll have to do on your end. You shall be able to stop ModSecurity for any Internet site if necessary, or to switch on a detection mode, so all activity shall be recorded, but the firewall shall not take any real action. You shall be able to view detailed logs using your Hepsia CP including the IP address where the attack originated from, what the attacker planned to do and how ModSecurity handled the threat. Since we take the protection of our customers' Internet sites very seriously, we employ a selection of commercial rules which we take from one of the leading companies that maintain this kind of rules. Our administrators also include custom rules to ensure that your websites will be protected against as many threats as possible.