{"id":4852,"date":"2025-01-19T03:25:01","date_gmt":"2025-01-19T08:25:01","guid":{"rendered":"https:\/\/underhost.com\/blog\/?p=4852"},"modified":"2026-10-23T08:32:20","modified_gmt":"2026-10-23T12:32:20","slug":"how-to-configure-modsecurity-in-cpanel-for-advanced-security","status":"publish","type":"post","link":"https:\/\/underhost.com\/blog\/how-to-configure-modsecurity-in-cpanel-for-advanced-security\/","title":{"rendered":"How to Configure ModSecurity in cPanel for Advanced Security"},"content":{"rendered":"<div class=\"uh-blog-hero\" style=\"margin:0 0 40px;text-align:center;padding:48px 24px;border-radius:20px;background:linear-gradient(135deg,#0D1F3C 0%,#125A8A 58%,#176EA5 100%);color:#ffffff;box-shadow:0 20px 40px -15px rgba(13,31,60,0.28);position:relative;overflow:hidden;\">\n<div style=\"display:inline-flex;align-items:center;gap:8px;padding:7px 14px;margin-bottom:16px;border:1px solid rgba(0,212,255,0.32);border-radius:999px;color:#DFF8FF;font-size:12px;font-weight:800;letter-spacing:.06em;text-transform:uppercase;background:rgba(0,212,255,0.10);\"><i class=\"fas fa-cogs\" style=\"color:#00D4FF;\"><\/i> cPanel &amp; WHM<\/div>\n<h1 style=\"color:#ffffff;font-size:clamp(32px,5vw,46px);line-height:1.12;margin:0 0 14px;font-weight:800;\">How to Configure ModSecurity in cPanel for Advanced Security<\/h1>\n<\/div>\n<div class=\"uh-blog-excerpt\" style=\"border-left:4px solid #00D4FF;padding:18px 20px;margin:0 0 34px;background:#F8FAFC;color:#1F2937;border-radius:0 14px 14px 0;box-shadow:0 8px 28px rgba(13,31,60,0.08);line-height:1.75;\"><strong style=\"color:#0D1F3C;\">Short answer:<\/strong> <strong>ModSecurity<\/strong> is a powerful web application firewall (WAF) that provides an additional layer of protection for your websites by filtering and monitoring HTTP traffic. It is a must-have tool for defending against a variety of cyber threats, such as SQL injection, cross-site scripting (XSS), and brute-force attacks. If you&#8217;re using cPanel, you can easily configure ModSecurity to enhance your website&#8217;s security. In this guide, we&#8217;ll walk you through the setup process, explore its benefits, and highlight free WAF options you can add to your UnderHost cPanel hosting environment.<\/div>\n<nav class=\"uh-toc\" aria-label=\"Table of contents\" style=\"background:#ffffff;border:1px solid #E5E7EB;border-radius:16px;padding:20px 22px;margin:0 0 34px;box-shadow:0 4px 12px rgba(13,31,60,0.08);\">\n<div style=\"font-size:12px;font-weight:800;letter-spacing:.06em;text-transform:uppercase;color:#176EA5;margin-bottom:10px;\"><i class=\"fas fa-list\" style=\"color:#00D4FF;\"><\/i> In this guide<\/div>\n<ol style=\"margin:0;padding-left:20px;columns:2 260px;column-gap:28px;line-height:1.9;\">\n<li><a href=\"#why-use-modsecurity\" style=\"color:#176EA5;text-decoration:none;font-weight:600;\">Why Use ModSecurity?<\/a><\/li>\n<li><a href=\"#prerequisites\" style=\"color:#176EA5;text-decoration:none;font-weight:600;\">Prerequisites<\/a><\/li>\n<li><a href=\"#how-to-enable-and-configure-modsecurity-in-cpane\" style=\"color:#176EA5;text-decoration:none;font-weight:600;\">How to Enable and Configure ModSecurity in cPanel<\/a><\/li>\n<li><a href=\"#adding-free-waf-options-to-your-cpanel\" style=\"color:#176EA5;text-decoration:none;font-weight:600;\">Adding Free WAF Options to Your cPanel<\/a><\/li>\n<li><a href=\"#benefits-of-using-modsecurity-with-cpanel\" style=\"color:#176EA5;text-decoration:none;font-weight:600;\">Benefits of Using ModSecurity with cPanel<\/a><\/li>\n<li><a href=\"#troubleshooting-common-issues\" style=\"color:#176EA5;text-decoration:none;font-weight:600;\">Troubleshooting Common Issues<\/a><\/li>\n<li><a href=\"#why-choose-underhost-for-cpanel-hosting\" style=\"color:#176EA5;text-decoration:none;font-weight:600;\">Why Choose UnderHost for cPanel Hosting?<\/a><\/li>\n<\/ol>\n<\/nav>\n<div class=\"uh-post-content\" style=\"color:#1F2937;font-size:16px;line-height:1.75;\">\n<hr style=\"border:0;border-top:1px solid #E5E7EB;margin:28px 0;\"\/>\n<h2 id=\"why-use-modsecurity\" style=\"color:#0D1F3C;font-size:28px;line-height:1.25;margin:34px 0 14px;scroll-margin-top:90px;\"><i class=\"fas fa-shield-alt\" style=\"color:#00D4FF;\"><\/i> Why Use ModSecurity?<\/h2>\n<p style=\"margin:0 0 18px;\">ModSecurity is an essential tool for website protection, offering features such as:<\/p>\n<ul style=\"margin:0 0 24px;padding-left:22px;\">\n<li style=\"margin:0 0 8px;\"><strong>Real-Time Threat Detection:<\/strong> Blocks malicious requests before they reach your web application.<\/li>\n<li style=\"margin:0 0 8px;\"><strong>Protection Against Common Vulnerabilities:<\/strong> Safeguards against SQL injection, XSS, and other attacks.<\/li>\n<li style=\"margin:0 0 8px;\"><strong>Customizable Rules:<\/strong> Allows administrators to create or modify security rules to meet specific needs.<\/li>\n<li style=\"margin:0 0 8px;\"><strong>Detailed Logging:<\/strong> Tracks malicious activity and generates detailed reports for analysis.<\/li>\n<li style=\"margin:0 0 8px;\"><strong>Easy Integration:<\/strong> Works seamlessly with cPanel and Apache web servers.<\/li>\n<\/ul>\n<hr style=\"border:0;border-top:1px solid #E5E7EB;margin:28px 0;\"\/>\n<h2 id=\"prerequisites\" style=\"color:#0D1F3C;font-size:28px;line-height:1.25;margin:34px 0 14px;scroll-margin-top:90px;\"><i class=\"fas fa-angle-double-right\" style=\"color:#00D4FF;\"><\/i> Prerequisites<\/h2>\n<p style=\"margin:0 0 18px;\">Before configuring ModSecurity, ensure the following:<\/p>\n<ul style=\"margin:0 0 24px;padding-left:22px;\">\n<li style=\"margin:0 0 8px;\"><strong>cPanel Access:<\/strong> You must have access to your cPanel account.<\/li>\n<li style=\"margin:0 0 8px;\"><strong>Administrator Privileges:<\/strong> If you&#8217;re a reseller or server owner, you may need root access to configure advanced settings.<\/li>\n<li style=\"margin:0 0 8px;\"><strong>Installed ModSecurity Module:<\/strong> ModSecurity must already be installed on your server. Most UnderHost hosting plans include it by default. If not, contact our support team for assistance.<\/li>\n<\/ul>\n<hr style=\"border:0;border-top:1px solid #E5E7EB;margin:28px 0;\"\/>\n<h2 id=\"how-to-enable-and-configure-modsecurity-in-cpane\" style=\"color:#0D1F3C;font-size:28px;line-height:1.25;margin:34px 0 14px;scroll-margin-top:90px;\"><i class=\"fas fa-shield-alt\" style=\"color:#00D4FF;\"><\/i> How to Enable and Configure ModSecurity in cPanel<\/h2>\n<h3 style=\"color:#0D1F3C;font-size:21px;line-height:1.3;margin:26px 0 10px;\">1. Log in to cPanel<\/h3>\n<p style=\"margin:0 0 18px;\">Access your cPanel account by navigating to <code>https:\/\/yourdomain.com\/cpanel<\/code>. Enter your username and password to log in.<\/p>\n<h3 style=\"color:#0D1F3C;font-size:21px;line-height:1.3;margin:26px 0 10px;\">2. Locate ModSecurity<\/h3>\n<p style=\"margin:0 0 18px;\">In the cPanel dashboard, scroll down to the &#8220;Security&#8221; section and click on <strong>ModSecurity<\/strong>.<\/p>\n<h3 style=\"color:#0D1F3C;font-size:21px;line-height:1.3;margin:26px 0 10px;\">3. Enable ModSecurity<\/h3>\n<p style=\"margin:0 0 18px;\">Once in the ModSecurity interface, follow these steps:<\/p>\n<ul style=\"margin:0 0 24px;padding-left:22px;\">\n<li style=\"margin:0 0 8px;\">Select the domain or subdomain you want to protect.<\/li>\n<li style=\"margin:0 0 8px;\">Click the toggle switch or &#8220;On&#8221; button to enable ModSecurity for the selected domain.<\/li>\n<\/ul>\n<p style=\"margin:0 0 18px;\">If you manage multiple domains, you can enable ModSecurity for all of them with a single click by choosing &#8220;Enable All Domains.&#8221;<\/p>\n<h3 style=\"color:#0D1F3C;font-size:21px;line-height:1.3;margin:26px 0 10px;\">4. Configure ModSecurity Rules<\/h3>\n<p style=\"margin:0 0 18px;\">ModSecurity uses rulesets to identify and block malicious traffic. By default, your server may come with a pre-installed ruleset, such as the OWASP ModSecurity Core Rule Set (CRS). You can customize these rules based on your security requirements:<\/p>\n<ul style=\"margin:0 0 24px;padding-left:22px;\">\n<li style=\"margin:0 0 8px;\"><strong>Default Rules:<\/strong> Leave the default rules enabled for basic protection.<\/li>\n<li style=\"margin:0 0 8px;\"><strong>Custom Rules:<\/strong> To add or modify rules, you&#8217;ll need WHM access: Here, you can upload third-party rules or create your own.\n<pre style=\"background:#0D1F3C;color:#EAF6FF;padding:18px 20px;border-radius:14px;overflow-x:auto;line-height:1.7;font-size:15px;\"><code>WHM &gt; Security Center &gt; ModSecurity&#x2122; Vendors<\/code><\/pre>\n<\/li>\n<\/ul>\n<h3 style=\"color:#0D1F3C;font-size:21px;line-height:1.3;margin:26px 0 10px;\">5. Test Your Configuration<\/h3>\n<p style=\"margin:0 0 18px;\">After enabling ModSecurity, it\u2019s important to test its functionality:<\/p>\n<ul style=\"margin:0 0 24px;padding-left:22px;\">\n<li style=\"margin:0 0 8px;\">Attempt to access your website using known attack patterns (e.g., injecting SQL queries into a form). ModSecurity should block the request.<\/li>\n<li style=\"margin:0 0 8px;\">Review the logs for any blocked requests to ensure the rules are working as expected.<\/li>\n<\/ul>\n<h3 style=\"color:#0D1F3C;font-size:21px;line-height:1.3;margin:26px 0 10px;\">6. Monitor Logs and Adjust Rules<\/h3>\n<p style=\"margin:0 0 18px;\">ModSecurity generates detailed logs for every blocked request. To access these logs in cPanel:<\/p>\n<ul style=\"margin:0 0 24px;padding-left:22px;\">\n<li style=\"margin:0 0 8px;\">Go to <strong>Metrics &gt; Raw Access Logs<\/strong> in your cPanel dashboard.<\/li>\n<li style=\"margin:0 0 8px;\">Analyze the logs for false positives or patterns in malicious traffic.<\/li>\n<\/ul>\n<p style=\"margin:0 0 18px;\">If a legitimate request is mistakenly blocked, consider adjusting or disabling specific rules.<\/p>\n<hr style=\"border:0;border-top:1px solid #E5E7EB;margin:28px 0;\"\/>\n<h2 id=\"adding-free-waf-options-to-your-cpanel\" style=\"color:#0D1F3C;font-size:28px;line-height:1.25;margin:34px 0 14px;scroll-margin-top:90px;\"><i class=\"fas fa-angle-double-right\" style=\"color:#00D4FF;\"><\/i> Adding Free WAF Options to Your cPanel<\/h2>\n<p style=\"margin:0 0 18px;\">For even more security, consider integrating these free WAF solutions with your ModSecurity configuration:<\/p>\n<h3 style=\"color:#0D1F3C;font-size:21px;line-height:1.3;margin:26px 0 10px;\">1. OWASP ModSecurity Core Rule Set (CRS)<\/h3>\n<p style=\"margin:0 0 18px;\">The OWASP CRS is a free, community-driven ruleset that protects against common vulnerabilities like SQL injection and XSS. It\u2019s often pre-installed with ModSecurity or can be added via WHM:<\/p>\n<pre style=\"background:#0D1F3C;color:#EAF6FF;padding:18px 20px;border-radius:14px;overflow-x:auto;line-height:1.7;font-size:15px;\"><code>WHM &gt; Security Center &gt; ModSecurity&#x2122; Vendors<\/code><\/pre>\n<p style=\"margin:0 0 18px;\">Official repository: <a href=\"https:\/\/github.com\/coreruleset\/coreruleset\" rel=\"noopener\" target=\"_blank\">OWASP CRS GitHub<\/a><\/p>\n<h3 style=\"color:#0D1F3C;font-size:21px;line-height:1.3;margin:26px 0 10px;\">2. Cloudflare Free Plan<\/h3>\n<p style=\"margin:0 0 18px;\">Cloudflare\u2019s free plan includes basic WAF-like protections by filtering malicious traffic through their global CDN. It\u2019s an excellent complement to ModSecurity. Steps to integrate:<\/p>\n<ol style=\"margin:0 0 24px;padding-left:22px;\">\n<li style=\"margin:0 0 8px;\">Sign up for Cloudflare and point your domain&#8217;s DNS to their nameservers.<\/li>\n<li style=\"margin:0 0 8px;\">Use the <strong>Cloudflare cPanel plugin<\/strong> for easy management.<\/li>\n<\/ol>\n<h3 style=\"color:#0D1F3C;font-size:21px;line-height:1.3;margin:26px 0 10px;\">3. Atomicorp Free ModSecurity Rules<\/h3>\n<p style=\"margin:0 0 18px;\">Atomicorp offers a free ruleset for ModSecurity, regularly updated to protect against emerging threats. Download: <a href=\"https:\/\/www.atomicorp.com\/\" rel=\"noopener\" target=\"_blank\">Atomicorp Free Rules<\/a><\/p>\n<h3 style=\"color:#0D1F3C;font-size:21px;line-height:1.3;margin:26px 0 10px;\">4. NAXSI (Nginx Anti-XSS and SQL Injection)<\/h3>\n<p style=\"margin:0 0 18px;\">If you\u2019re using NGINX as a reverse proxy with cPanel, NAXSI is a lightweight WAF that offers protection against SQL injection and XSS vulnerabilities. Details: <a href=\"https:\/\/naxsi.com\" rel=\"noopener\" target=\"_blank\">NAXSI Official Site<\/a><\/p>\n<hr style=\"border:0;border-top:1px solid #E5E7EB;margin:28px 0;\"\/>\n<h2 id=\"benefits-of-using-modsecurity-with-cpanel\" style=\"color:#0D1F3C;font-size:28px;line-height:1.25;margin:34px 0 14px;scroll-margin-top:90px;\"><i class=\"fas fa-shield-alt\" style=\"color:#00D4FF;\"><\/i> Benefits of Using ModSecurity with cPanel<\/h2>\n<p style=\"margin:0 0 18px;\">Integrating ModSecurity with cPanel offers several advantages:<\/p>\n<ul style=\"margin:0 0 24px;padding-left:22px;\">\n<li style=\"margin:0 0 8px;\"><strong>Enhanced Security:<\/strong> Protects your website from a wide range of cyber threats.<\/li>\n<li style=\"margin:0 0 8px;\"><strong>User-Friendly Interface:<\/strong> Easily enable or disable ModSecurity for specific domains via cPanel.<\/li>\n<li style=\"margin:0 0 8px;\"><strong>Cost-Effective Protection:<\/strong> Built into your hosting plan at no additional cost.<\/li>\n<li style=\"margin:0 0 8px;\"><strong>Customization Options:<\/strong> Fine-tune rules to match your website\u2019s unique needs.<\/li>\n<\/ul>\n<hr style=\"border:0;border-top:1px solid #E5E7EB;margin:28px 0;\"\/>\n<h2 id=\"troubleshooting-common-issues\" style=\"color:#0D1F3C;font-size:28px;line-height:1.25;margin:34px 0 14px;scroll-margin-top:90px;\"><i class=\"fas fa-exclamation-triangle\" style=\"color:#00D4FF;\"><\/i> Troubleshooting Common Issues<\/h2>\n<p style=\"margin:0 0 18px;\">If you encounter issues with ModSecurity, here are some tips:<\/p>\n<ul style=\"margin:0 0 24px;padding-left:22px;\">\n<li style=\"margin:0 0 8px;\"><strong>False Positives:<\/strong> Review the logs to identify legitimate requests being blocked. Modify or disable the offending rules.<\/li>\n<li style=\"margin:0 0 8px;\"><strong>Performance Impact:<\/strong> On high-traffic websites, ModSecurity may slightly impact performance. Optimize rulesets to reduce overhead.<\/li>\n<li style=\"margin:0 0 8px;\"><strong>Compatibility Issues:<\/strong> If ModSecurity conflicts with a plugin or application, create exceptions in the rules.<\/li>\n<\/ul>\n<p style=\"margin:0 0 18px;\">Contact UnderHost support if you need assistance troubleshooting any issues.<\/p>\n<hr style=\"border:0;border-top:1px solid #E5E7EB;margin:28px 0;\"\/>\n<h2 id=\"why-choose-underhost-for-cpanel-hosting\" style=\"color:#0D1F3C;font-size:28px;line-height:1.25;margin:34px 0 14px;scroll-margin-top:90px;\"><i class=\"fas fa-server\" style=\"color:#00D4FF;\"><\/i> Why Choose UnderHost for cPanel Hosting?<\/h2>\n<p style=\"margin:0 0 18px;\">At UnderHost, we prioritize your website\u2019s security by providing optimized cPanel hosting environments with ModSecurity pre-installed. Here\u2019s what you get with our hosting:<\/p>\n<ul style=\"margin:0 0 24px;padding-left:22px;\">\n<li style=\"margin:0 0 8px;\"><strong>Advanced Security:<\/strong> ModSecurity with pre-configured rules to protect your sites.<\/li>\n<li style=\"margin:0 0 8px;\"><strong>Offshore Hosting:<\/strong> Privacy-focused locations to secure your data.<\/li>\n<li style=\"margin:0 0 8px;\"><strong>24\/7 Support:<\/strong> Our team is always available to help you configure and manage ModSecurity.<\/li>\n<li style=\"margin:0 0 8px;\"><strong>High-Performance Servers:<\/strong> SSD-powered hosting for fast and reliable website performance.<\/li>\n<\/ul>\n<p style=\"margin:0 0 18px;\"><a href=\"https:\/\/underhost.com\/\">Explore Our Hosting Plans<\/a> to experience secure, high-performance cPanel hosting with ModSecurity today!<\/p>\n<div aria-hidden=\"true\" class=\"uh-section-divider\" style=\"width:min(100% - 32px, 1080px);margin:44px auto;display:grid;grid-template-columns:1fr 32px 1fr;align-items:center;gap:18px;pointer-events:none;\"><span style=\"height:1px;background:linear-gradient(90deg,transparent,rgba(0,212,255,0.40),rgba(23,110,165,0.24),transparent);\"><\/span><img alt=\"\" decoding=\"async\" height=\"32\" loading=\"lazy\" src=\"https:\/\/cdn.underhost.com\/android-chrome-192x192.webp\" style=\"width:32px;height:32px;display:block;border-radius:8px;filter:drop-shadow(0 0 14px rgba(0,212,255,0.30));\" width=\"32\"\/><span style=\"height:1px;background:linear-gradient(90deg,transparent,rgba(23,110,165,0.24),rgba(0,212,255,0.40),transparent);\"><\/span><\/div>\n<\/div>\n<div class=\"uh-blog-cta\" style=\"background:linear-gradient(135deg,#0D1F3C 0%,#125A8A 58%,#176EA5 100%);color:#ffffff;padding:36px 24px;border-radius:20px;text-align:center;margin:44px 0;box-shadow:0 20px 40px -15px rgba(13,31,60,0.32);\">\n<h2 style=\"margin:0 0 12px;font-size:28px;line-height:1.25;color:#ffffff;\">Need help putting this into practice?<\/h2>\n<p style=\"font-size:17px;margin:0 auto 22px;color:#EAF6FF;max-width:720px;line-height:1.7;\">Our team can review your setup and help you choose the right plan. Contact @CustomerPanel for support.<\/p>\n<p><a href=\"https:\/\/underhost.com\/shared-hosting.php\" style=\"background:linear-gradient(90deg,#00D4FF,#0077FF);color:#ffffff;padding:13px 28px;border-radius:10px;text-decoration:none;font-weight:800;display:inline-block;margin:8px;\">View hosting plans<\/a><a href=\"https:\/\/customerpanel.ca\/client\/\" style=\"background:transparent;color:#ffffff;padding:12px 28px;border-radius:10px;text-decoration:none;font-weight:800;display:inline-block;margin:8px;border:1px solid rgba(255,255,255,0.32);\">Contact @CustomerPanel<\/a><\/div>\n<div class=\"uh-faq-section\" id=\"faq\" style=\"margin:34px 0;scroll-margin-top:90px;\">\n<h2 style=\"color:#0D1F3C;font-size:28px;line-height:1.25;margin:0 0 18px;border-bottom:2px solid rgba(0,212,255,0.22);padding-bottom:10px;\">Frequently asked questions<\/h2>\n<div style=\"margin-top:18px;background:#F8FAFC;padding:18px 20px;border-radius:14px;border:1px solid rgba(23,110,165,0.14);\">\n<h3 style=\"color:#0D1F3C;margin:0 0 8px;font-size:19px;\">Does ModSecurity slow down my website?<\/h3>\n<p style=\"margin:0;color:#1F2937;line-height:1.7;\">It adds a small amount of work to each request. With a well-tuned rule set, most sites see little difference.<\/p>\n<\/div>\n<div style=\"margin-top:18px;background:#F8FAFC;padding:18px 20px;border-radius:14px;border:1px solid rgba(23,110,165,0.14);\">\n<h3 style=\"color:#0D1F3C;margin:0 0 8px;font-size:19px;\">What should I do if ModSecurity blocks a legitimate request?<\/h3>\n<p style=\"margin:0;color:#1F2937;line-height:1.7;\">Find the rule ID in the ModSecurity log or in WHM&#8217;s ModSecurity Tools, then disable that one rule for the affected domain. Do not turn ModSecurity off for the whole server.<\/p>\n<\/div>\n<div style=\"margin-top:18px;background:#F8FAFC;padding:18px 20px;border-radius:14px;border:1px solid rgba(23,110,165,0.14);\">\n<h3 style=\"color:#0D1F3C;margin:0 0 8px;font-size:19px;\">Can I turn off ModSecurity for one domain?<\/h3>\n<p style=\"margin:0;color:#1F2937;line-height:1.7;\">Yes. cPanel has a ModSecurity page where you can turn it off per domain, if your host allows it. Use this only for testing, and turn it back on.<\/p>\n<\/div>\n<div style=\"margin-top:18px;background:#F8FAFC;padding:18px 20px;border-radius:14px;border:1px solid rgba(23,110,165,0.14);\">\n<h3 style=\"color:#0D1F3C;margin:0 0 8px;font-size:19px;\">Which rule set should I use?<\/h3>\n<p style=\"margin:0;color:#1F2937;line-height:1.7;\">The OWASP Core Rule Set is free and widely used. Commercial rule sets, such as those included with Imunify360, are another option.<\/p>\n<\/div>\n<div style=\"margin-top:18px;background:#F8FAFC;padding:18px 20px;border-radius:14px;border:1px solid rgba(23,110,165,0.14);\">\n<h3 style=\"color:#0D1F3C;margin:0 0 8px;font-size:19px;\">Does ModSecurity replace software updates?<\/h3>\n<p style=\"margin:0;color:#1F2937;line-height:1.7;\">No. A web application firewall blocks many attacks, but outdated software can still be exploited. Keep your applications updated.<\/p>\n<\/div>\n<\/div>\n<p><!-- uh-related-start --><\/p>\n<div style=\"background:#F4F8FC;border:1px solid #DCE7F3;border-radius:14px;padding:18px 22px;margin:32px 0 8px;\">\n<h2 style=\"margin:0 0 12px;font-size:22px;\">Related guides<\/h2>\n<ul style=\"margin:0;padding-left:20px;\">\n<li style=\"margin:0 0 8px;\"><a href=\"https:\/\/underhost.com\/blog\/top-cpanel-security-tips-to-keep-your-hosting-environment-safe\/\">Top cPanel Security Tips to Keep Your Hosting Environment Safe<\/a><\/li>\n<li style=\"margin:0 0 8px;\"><a href=\"https:\/\/underhost.com\/blog\/cpanel-tutorial-security-ip-deny-manager\/\">cPanel Tutorial: Security &#8211; IP Deny Manager<\/a><\/li>\n<li style=\"margin:0 0 8px;\"><a href=\"https:\/\/underhost.com\/blog\/how-to-install-and-configure-csf-firewall-on-your-server\/\">How to Install and Configure CSF Firewall on Your Server<\/a><\/li>\n<li style=\"margin:0 0 8px;\"><a href=\"https:\/\/underhost.com\/blog\/critical-cpanel-authentication-bypass-patch-now-cve-2026-41940\/\">Critical cPanel Authentication Bypass &#8211; Patch Now (CVE-2026-41940)<\/a><\/li>\n<li style=\"margin:0 0 8px;\"><a href=\"https:\/\/underhost.com\/blog\/configure-exim-cpanel-server-use-smart-host\/\">Updated MARCH 2025: How to Configure a Smart Host in Exim<\/a><\/li>\n<\/ul>\n<\/div>\n<p><!-- uh-related-end --><br \/>\n<script type=\"application\/ld+json\">{\"@context\": \"https:\/\/schema.org\", \"@type\": \"FAQPage\", \"mainEntity\": [{\"@type\": \"Question\", \"name\": \"Does ModSecurity slow down my website?\", \"acceptedAnswer\": {\"@type\": \"Answer\", \"text\": \"It adds a small amount of work to each request. With a well-tuned rule set, most sites see little difference.\"}}, {\"@type\": \"Question\", \"name\": \"What should I do if ModSecurity blocks a legitimate request?\", \"acceptedAnswer\": {\"@type\": \"Answer\", \"text\": \"Find the rule ID in the ModSecurity log or in WHM's ModSecurity Tools, then disable that one rule for the affected domain. Do not turn ModSecurity off for the whole server.\"}}, {\"@type\": \"Question\", \"name\": \"Can I turn off ModSecurity for one domain?\", \"acceptedAnswer\": {\"@type\": \"Answer\", \"text\": \"Yes. cPanel has a ModSecurity page where you can turn it off per domain, if your host allows it. Use this only for testing, and turn it back on.\"}}, {\"@type\": \"Question\", \"name\": \"Which rule set should I use?\", \"acceptedAnswer\": {\"@type\": \"Answer\", \"text\": \"The OWASP Core Rule Set is free and widely used. Commercial rule sets, such as those included with Imunify360, are another option.\"}}, {\"@type\": \"Question\", \"name\": \"Does ModSecurity replace software updates?\", \"acceptedAnswer\": {\"@type\": \"Answer\", \"text\": \"No. A web application firewall blocks many attacks, but outdated software can still be exploited. Keep your applications updated.\"}}]}<\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Protect your websites with ModSecurity, a powerful web application firewall available in cPanel. This guide covers how to enable and configure ModSecurity, customize rulesets like OWASP CRS, and integrate free WAFs like Cloudflare and Atomicorp for enhanced security. Learn how to defend against SQL injection, XSS, and other cyber threats with UnderHost\u2019s secure hosting solutions.<\/p>\n","protected":false},"author":1,"featured_media":4853,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[202,81,206],"tags":[161,108,123,186,109],"class_list":["post-4852","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cpanel-whm","category-hosting-guides","category-hosting-services","tag-cloudflare","tag-tag-cpanel","tag-tag-domains","tag-security-updates","tag-tag-whm"],"_links":{"self":[{"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/posts\/4852","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/comments?post=4852"}],"version-history":[{"count":8,"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/posts\/4852\/revisions"}],"predecessor-version":[{"id":6788,"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/posts\/4852\/revisions\/6788"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/media\/4853"}],"wp:attachment":[{"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/media?parent=4852"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/categories?post=4852"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/underhost.com\/blog\/wp-json\/wp\/v2\/tags?post=4852"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}