Managed ModSecurity, looked after for you
ModSecurity inspects web requests and blocks attacks such as SQL injection. It works only when its rules are tuned to your site, because default rules can block real visitors.
ModSecurity: what we look after
- ModSecurity with the OWASP core rules on Apache or Nginx
- Detection-only mode first, then blocking when it is safe
- Exclusions for your admin tools and forms
- Log review and alerts
When ModSecurity goes wrong
- Customers blocked by false positives
- A firewall left in detection mode and never switched on
- Rules that slow the site
Who uses managed ModSecurity
Sites that handle logins, forms and payments and want an extra layer.
What it needs
Apache or Nginx with the module, and some time for tuning.
What we check first
Before we change anything on a new ModSecurity setup, we look at these, and we tell you what we found in plain words:
- Whether the engine is in detection mode or blocking mode
- Which rule set is in use and its version
- The false positives in the logs and the exclusions they need
From order to a watched ModSecurity setup
ModSecurity is part of every managed plan. Besides what is listed above, each plan includes outside checks every minute, off-server backups, security hardening and a team that answers your tickets. The price counts servers, not apps.
Tell us what you run
Order a managed plan and list your servers and the apps on them, or write to us first with questions.
We look before we touch
We check what is installed, what is out of date and what is not backed up, and tell you in plain words.
Backups and watching first
Backups and outside checks are set up before any change, so we can always go back.
Then the steady work
Updates, security, tuning and fixes follow, and you can ask us anything by ticket.
Plans start at ₹1,999 a month for one server. GST is added at checkout. See all managed plans.
ModSecurity support: your questions answered
Will it block my real visitors?
We start in detection mode, review the logs and add exclusions before we turn blocking on.
Does it replace updates?
No. It is an extra layer. Updates and secure code are still the base.
Is ModSecurity covered by the managed plans?
Yes. The managed plans count servers, not applications, so ModSecurity on your server is covered with no extra price per app. Plans start at ₹1,999 a month for one server, and GST is added at checkout.
Other web servers, mail and network we look after
Nginx
Managed Nginx support, included in every plan.
Apache
Managed Apache support, included in every plan.
LiteSpeed
Managed LiteSpeed support, included in every plan.
HAProxy
Managed HAProxy support, included in every plan.
Varnish
Managed Varnish support, included in every plan.
All managed applications
See the full list of about 150 applications, and ask about anything that is not listed.
Get ModSecurity looked after
Choose a managed plan and tell us which servers and apps to look after.