ModSecurity is a highly effective web application layer firewall for Apache web servers. It monitors the entire HTTP traffic to a website without affecting its functionality and when it discovers an intrusion attempt, it blocks it. The firewall additionally maintains a more thorough log for the website visitors than any web server does, so you shall manage to keep track of what's going on with your Internet sites better than if you rely simply on standard logs. ModSecurity works with security rules based on which it stops attacks. For instance, it recognizes if anyone is attempting to log in to the administration area of a specific script multiple times or if a request is sent to execute a file with a particular command. In these instances these attempts set off the corresponding rules and the firewall software blocks the attempts in real time, after that records comprehensive information about them within its logs. ModSecurity is among the most effective software firewalls on the market and it can easily protect your web apps against a large number of threats and vulnerabilities, particularly in case you don’t update them or their plugins regularly.
ModSecurity in Hosting
ModSecurity comes by default with all hosting packages that we offer and it will be activated automatically for any domain or subdomain that you add/create in your Hepsia hosting CP. The firewall has three different modes, so you can switch on and deactivate it with only a click or set it to detection mode, so it shall maintain a log of all attacks, but it'll not do anything to stop them. The log for any of your sites will feature elaborate information which includes the nature of the attack, where it originated from, what action was taken by ModSecurity, and so forth. The firewall rules that we use are frequently updated and incorporate both commercial ones we get from a third-party security business and custom ones our system admins include in the event that they detect a new sort of attacks. This way, the websites which you host here shall be way more secure with no action needed on your end.