Server security centre
Run a server security audit across the whole fleet without building the checklist by hand. One table shows the firewall, login protection, WAF, malware scanning and two-factor state of every server. Anything missing becomes a finding with the server’s name on it, and it closes itself once you fix it.
- Topic
- E · Security
- Order
- 01 / 05
- Points
- 06
- 01Engines per serverFirewall, login protection, WAF, malware scanning and two-factor, each with its state.
- 02Findings close themselvesEach is re-evaluated against its condition and closes once you open the firewall or flip the switch.
- 03The weakest linkThe fleet score leads with the lowest server, not the average.
- 04Switches the panel offersCompiler, fork bomb, SMTP and shell on cPanel; restricted mode on Plesk; auto updates with no panel.
What it does.
Before an audit you shouldn’t have to work out by hand what is missing where. Each finding names the server and the problem: a firewall that stopped, a scanner that was never installed, a root password nobody has changed in months. You can’t tick a finding off yourself. It is re-checked against its condition, so the list stays honest. The fleet score shows the worst server rather than the average, because that is the one an attacker goes for.
Per server: the engine and state for firewall, login protection, WAF, malware scanning and two-factor.
Findings can’t be marked resolved by hand. Each is re-evaluated against its condition and closes once you turn the firewall back on or flip the switch.
The fleet score leads with the lowest server, not the average: a fleet is only as secure as its weakest link.
Hardening switches match what the panel offers. On cPanel: compiler access, fork bomb protection, SMTP restriction and shell access. On Plesk: restricted mode. With no panel: automatic updates and brute force protection only.
Linked switches stay in step: two-factor also updates the root access profile, and brute force protection updates the login protection state.
Login attempts and blocks from the last 24 hours sit in each server row, and they match the numbers in your alerts.
Security
From the firewall to SSH keys, read per server.
- E.01This page Server security centreRun a server security audit across the whole fleet without building the checklist by hand. One table shows the firewall, login protection, WAF, malware scanning and two-factor state of every server. Anything missing becomes a finding with the server’s name on it, and it closes itself once you fix it.
- E.02Details Server firewall managementManage the firewall on every server from one screen, whatever runs it: CSF (ConfigServer Firewall), Plesk Firewall, firewalld or ufw. The panel reads the engine from the server and works through it. You add rules, edit IP lists and block countries on CSF in one place, instead of learning a different command set on each machine.
- E.03Details Brute force protectionWatch failed login attempts and blocked IPs on every server from here, and unblock an IP when a customer locks themselves out. The screen follows the tool your panel already uses: cPHulk on cPanel/WHM, Fail2Ban jails on Plesk, Brute Force Monitor on DirectAdmin. Thresholds and the allow list sit on the same page.
- E.04Details WAF and malware scanner statusSee which WAF rule set and which malware scanner runs on each server: Imunify360, ModSecurity with OWASP CRS, Atomic Basic or ClamAV. A scanner that is installed but stopped shows up as a finding, and so does one that was never installed. For now the screen reports state; rule editing and manual scans are still being built.
- E.05Details Root password and SSH keysChange the root password from the panel without the password ever being stored. You see where it is kept, how many days ago it changed and who changed it. The sshd settings, including PermitRootLogin, password login and the SSH port, sit on the same page as the authorised SSH keys.
Connect your first server today.
Free for 14 days, no card needed. Create your account, add your first server with an API token or an SSH key, and the panel starts filling in a few minutes later.
No setup fee · Cancel anytime · EU-hosted