ModSecurity is a powerful firewall for Apache web servers which is used to stop attacks against web apps. It keeps track of the HTTP traffic to a given site in real time and prevents any intrusion attempts as soon as it discovers them. The firewall relies on a set of rules to accomplish that - as an example, trying to log in to a script admin area unsuccessfully many times sets off one rule, sending a request to execute a specific file which could result in getting access to the Internet site triggers a different rule, and so forth. ModSecurity is one of the best firewalls available and it will preserve even scripts that are not updated on a regular basis because it can prevent attackers from employing known exploits and security holes. Very detailed info about every single intrusion attempt is recorded and the logs the firewall keeps are much more detailed than the regular logs generated by the Apache server, so you may later examine them and determine whether you need to take more measures in order to improve the security of your script-driven Internet sites.
ModSecurity in Shared Website Hosting
ModSecurity comes standard with all shared website hosting packages which we offer and it will be activated automatically for any domain or subdomain you add/create within your Hepsia hosting Control Panel. The firewall has three different modes, so you can switch on and deactivate it with a click or set it to detection mode, so it will maintain a log of all attacks, but it will not do anything to stop them. The log for each of your Internet sites will include elaborate info including the nature of the attack, where it came from, what action was taken by ModSecurity, etc. The firewall rules that we use are frequently updated and comprise of both commercial ones we get from a third-party security firm and custom ones our system administrators add in the event that they detect a new kind of attacks. In this way, the websites which you host here will be far more secure without any action expected on your end.