The ever-changing cybersecurity landscape has become a real challenge for many businesses. Hackers are getting more sophisticated and business minded day by day, cyber-attacks have turned into a money-maker for ‘underground’ corporations. The web is a huge, tightly knit ecosystem, which is constantly getting polluted by malicious users and algorithms. So, once launched online, each website becomes vulnerable to tons of negative influences.
To ensure your websites are prepared to meet the challenges of the cybersecurity landscape, we have built up our platforms around enhanced advance security so you can enjoy the benefits of the online experience with peace of mind.
Here are some of the features and tools we have implemented to keep you safe online.
ModSecurity anti-hack firewall – The ModSecurity Apache module is a firewall that will effectively prevent URL forgery or “brute force” attacks and forum spamming attempts targeted at your websites. By default, ModSecurity is enabled for all our websites, so it will automatically block all incoming requests that are flagged as insecure. Also, it is kept constantly updated in order to prevent all types of ‘up-to-date’ attacks.
Website-based firewall – using our Outgoing Connections functionality, we restrict the outgoing traffic from you sites. It will prevent sensitive data leaking off your site to an external host. By default, all outgoing connections are disabled. If, however, you want to allow external connections to authorized IP addresses, you have the option to do so.
Anti-virus protection – our servers are equipped with a powerful security system to stop viruses, Trojans, worms and other malicious bugs aimed at disrupting your websites and emails. All our servers are protected by a constantly running anti-virus software. Heavily modified by our sysadmins, our anti-virus software operates in the background – it does not affect server performance and effectively keeps viruses, Trojans, worms and other malicious bugs out of our servers.
IP blocking – With the help of the IP Blocking tool, we can prevent a malicious user or a script from attacking your sites by blocking the IP address they are coming from. It allows us to easily deny a specific IP address access to the website or to a section of the website. You can even block an entire range of IP addresses, because a hacker might use a dynamic IP from a certain network to attack your site.
.htaccess – from .htaccess we can easily control the behavior of the Apache web server. For instance, we can protect the website content with password-protected folders and IP-based authentication, enable hotlink protection for images or CSS files, block different IP addresses from accessing the website and even block visitors that come from a particular site referrer.
Data corruption protection – our platform relies on the ZFS file system, which has an inbuilt checksum functionality to ensure protection against silent data corruption. This way, if data gets corrupted on one of the disks in the RAID array, the system will be able to recognize the corrupted files and to recover the data from the unaffected disk. In the meantime, the EXT4 file system, which is used by most hosting providers today, does not have checksums and hence might mistake the healthy files as being corrupted and thus compromise the data on the healthy disk as well. This is another benefit of customers enjoy.
Technical Support – we offer a great deal of tech support with hacked sites within reasonable limits. When our technical support team receives a report of a hacked site, they first try to contact you the customer and to provide advice on how the issue can be resolved in due time. If the issue escalades, our technicians then take the case in their hands to resolve as quickly as possible.
Data backups – if, by any chance, your site contents get lost or compromised, we try to restore them from the most recent back up. We offer daily backups, which are executed 4 times a day, and which can be restored relatively fast.
SSL certificates – An SSL certificate is a must-have security attribute for any e-commerce site. It encrypts and protects all the sensitive information submitted onto a site (login form details, credit card information, etc.) and serves as a solid proof of the site’s reliability. We offer free SSL certification with all our websites.
Last, but not least, we use comprehensive web stats that monitor website traffic, so we could quickly locate any possible malicious behavior targeted at websites and take measures to block it in time.
For questions on our support or services please contact us here.