Learn what ModSecurity actually is, how it works and what actually it does to defend your sites and web applications.
ModSecurity is an effective firewall for Apache web servers which is employed to stop attacks toward web applications. It monitors the HTTP traffic to a certain site in real time and prevents any intrusion attempts the instant it identifies them. The firewall uses a set of rules to do this - for example, attempting to log in to a script administrator area unsuccessfully many times sets off one rule, sending a request to execute a certain file that could result in accessing the Internet site triggers another rule, etc. ModSecurity is amongst the best firewalls available and it will protect even scripts which aren't updated regularly because it can prevent attackers from employing known exploits and security holes. Very comprehensive data about every intrusion attempt is recorded and the logs the firewall maintains are much more comprehensive than the standard logs provided by the Apache server, so you may later take a look at them and decide if you need to take additional measures so as to improve the protection of your script-driven sites.
ModSecurity in Shared Hosting
ModSecurity is available on all shared hosting
servers, so if you choose to host your Internet sites with our organization, they'll be protected against a wide array of attacks. The firewall is turned on by default for all domains and subdomains, so there'll be nothing you'll have to do on your end. You shall be able to stop ModSecurity for any Internet site if needed, or to activate a detection mode, so that all activity shall be recorded, but the firewall will not take any real action. You'll be able to view comprehensive logs from your Hepsia Control Panel including the IP address where the attack originated from, what the attacker wished to do and how ModSecurity dealt with the threat. As we take the security of our clients' Internet sites seriously, we use a selection of commercial rules that we get from one of the best companies which maintain this type of rules. Our admins also include custom rules to ensure that your sites shall be protected against as many threats as possible.