ModSecurity is a powerful web app layer firewall for Apache web servers. It monitors the whole HTTP traffic to an Internet site without affecting its operation and when it detects an intrusion attempt, it blocks it. The firewall additionally keeps a more detailed log for the website visitors than any web server does, so you will manage to keep track of what's happening with your Internet sites a lot better than if you rely simply on conventional logs. ModSecurity works with security rules based on which it helps prevent attacks. For example, it recognizes whether anyone is attempting to log in to the admin area of a particular script several times or if a request is sent to execute a file with a particular command. In such circumstances these attempts set off the corresponding rules and the firewall program hinders the attempts right away, then records comprehensive details about them inside its logs. ModSecurity is amongst the most effective software firewalls out there and it could easily protect your web applications against many threats and vulnerabilities, especially if you don’t update them or their plugins regularly.
ModSecurity in Shared Website Hosting
ModSecurity comes by default with all shared website hosting packages which we offer and it'll be switched on automatically for any domain or subdomain you add/create within your Hepsia hosting CP. The firewall has 3 different modes, so you'll be able to switch on and disable it with simply a click or set it to detection mode, so it'll keep a log of all attacks, but it will not do anything to stop them. The log for any of your websites shall feature in-depth information which includes the nature of the attack, where it came from, what action was taken by ModSecurity, etcetera. The firewall rules which we use are frequently updated and incorporate both commercial ones which we get from a third-party security business and custom ones that our system admins add in case that they detect a new kind of attacks. In this way, the sites you host here shall be a lot more protected without any action needed on your end.