WAF and malware scanner status
See which WAF rule set and which malware scanner runs on each server: Imunify360, ModSecurity with OWASP CRS, Atomic Basic or ClamAV. A scanner that is installed but stopped shows up as a finding, and so does one that was never installed. For now the screen reports state; rule editing and manual scans are still being built.
- Topic
- E · Security
- Order
- 04 / 05
- Points
- 05
- Panel support
- 3 / 4 panels
- 01Engine from the panelImunify360 where the imunify service runs, Atomic Basic on Plesk, ModSecurity + OWASP CRS on cPanel.
- 02Missing means missingA panel-less server has no WAF and that is reported as missing, not implied to be there.
- 03Stopped scanner findingAn installed but stopped scanner shows up as its own finding and links to the services screen.
- 04Reporting for nowRule management and manual scans aren’t here yet; the screen reports which engine runs.
What it does.
Installed doesn’t mean running. The table shows each engine’s state, so you don’t keep trusting a scanner that has been off for months. If one has stopped, the row takes you to the services screen and you start it from there. Rule editing and manual malware scans aren’t here yet. For now this screen tells you what runs where, and what doesn’t.
The WAF engine comes from the service list and the panel: an imunify service means Imunify360, Plesk means Atomic Basic, cPanel and DirectAdmin mean ModSecurity with OWASP CRS.
A panel-less server has no WAF, and the table reports it as missing rather than implying one is there.
The malware scanner is detected the same way (imunify360 or clamav), and you get a finding when neither is present.
An installed but stopped scanner is a finding of its own, with a link to the services screen.
Reporting only for now: rule management and starting a scan by hand are not available yet.
Which panels support it?
Capability WAF (ModSecurity) state
- yesManaged from the panel
- yesManaged from the panel
- yesManaged from the panel
- No panelnoNot possible on that panel
Servers without a control panel have no account, reseller or mailbox management, because those come from the panel itself. Firewall, DNS, services and the terminal work over SSH. See the full table
Security
From the firewall to SSH keys, read per server.
- E.01Details Server security centreRun a server security audit across the whole fleet without building the checklist by hand. One table shows the firewall, login protection, WAF, malware scanning and two-factor state of every server. Anything missing becomes a finding with the server’s name on it, and it closes itself once you fix it.
- E.02Details Server firewall managementManage the firewall on every server from one screen, whatever runs it: CSF (ConfigServer Firewall), Plesk Firewall, firewalld or ufw. The panel reads the engine from the server and works through it. You add rules, edit IP lists and block countries on CSF in one place, instead of learning a different command set on each machine.
- E.03Details Brute force protectionWatch failed login attempts and blocked IPs on every server from here, and unblock an IP when a customer locks themselves out. The screen follows the tool your panel already uses: cPHulk on cPanel/WHM, Fail2Ban jails on Plesk, Brute Force Monitor on DirectAdmin. Thresholds and the allow list sit on the same page.
- E.04This page WAF and malware scanner statusSee which WAF rule set and which malware scanner runs on each server: Imunify360, ModSecurity with OWASP CRS, Atomic Basic or ClamAV. A scanner that is installed but stopped shows up as a finding, and so does one that was never installed. For now the screen reports state; rule editing and manual scans are still being built.
- E.05Details Root password and SSH keysChange the root password from the panel without the password ever being stored. You see where it is kept, how many days ago it changed and who changed it. The sshd settings, including PermitRootLogin, password login and the SSH port, sit on the same page as the authorised SSH keys.
Connect your first server today.
Free for 14 days, no card needed. Create your account, add your first server with an API token or an SSH key, and the panel starts filling in a few minutes later.
No setup fee · Cancel anytime · EU-hosted