ModSecurity is a highly effective web application layer firewall for Apache web servers. It monitors the whole HTTP traffic to a site without affecting its functionality and if it discovers an intrusion attempt, it blocks it. The firewall also keeps a more detailed log for the site visitors than any web server does, so you'll be able to keep an eye on what's going on with your websites a lot better than if you rely only on standard logs. ModSecurity employs security rules based on which it helps prevent attacks. For example, it recognizes whether someone is attempting to log in to the administration area of a certain script multiple times or if a request is sent to execute a file with a certain command. In such circumstances these attempts set off the corresponding rules and the firewall program blocks the attempts immediately, then records detailed information about them in its logs. ModSecurity is amongst the best software firewalls available and it could easily protect your web applications against many threats and vulnerabilities, particularly if you don’t update them or their plugins regularly.
