To reduce the number of web applications being hacked, we’ve enabled the ModSecurity Apache module for all web hosting customer accounts.

ModSecurity is a small tool that does a big job. It’s an application-layer firewall that will effectively prevent most URL forgery hacker attacks and forum spamming attempts targeted at your websites.

ModSecurity is enabled by default for all the websites in a hosting account. You don’t have to configure or set up anything in order to have your website protected by ModSecurity.

Currently, ModSecurity is enabled in a blocking mode, so it will automatically block all incoming requests that are flagged as insecure. We are using the commercial rules at http://www.atomicorp.com to detect all insecure website requests.

You can access the ModSecurity section in the Hepsia Control Panel from the newly added shortcut on the Control Panel’s home page or from the Advanced drop-down menu.

If you have any questions about ModSecurity and how it will work, don’ hesitate to contact our support team.