Security concerns on  a shared server

In shared hosting, security is a tough battle. Web Hosters must consistently secure and update all their servers, as stipulated by their security policies. However, in multi-website environments like shared servers, the imperative extends to safeguarding hosted websites and countering diverse web and virus attacks. The challenge lies in fortifying each site inspite the amalgamation of different applications and software versions, with a notable majority of WordPress websites. This landscape brings its complications, particularly since WordPress-based sites, integrated with various themes and plugins, are susceptible to compromised content. Often, the custodians of these sites remain unaware of the vulnerabilities residing in third-party code and disregard the criticality of updates and patches. Such security fissures hold the potential to undermine websites, and in the direst scenario, impact other users on the same server.

About MAXER Hosting Kft.

MAXER Hosting Kft. is a Hungarian web hosting company, operating for almost two decades. They specialize in business website hosting, VPS, domain registration services, SSL certifications and other related services. They serve hundreds of customers within and outside their home country with their infrastructure and servers at the BIX Internet center, Budapest, connected to a high-speed backbone network.

Requirement of the customer

MAXER Hosting uses their in-house custom control panel built with thier in-depth knowlegde in core technologies. This custom-made panel boasts a chrooted web server and file system, setting it apart in terms of uniqueness and security compared to conventional control panels. Thus, adopting an off-the-shelf security suite isn’t a viable option. Instead, they require a tailored configuration to connect with the control panel and capture domain and hosting information, identify user information and have seamless compatibility with the chrooted file system. Considering all these factors, the choice falls on cPGuard for integration into their tailored solution, fortifying the shield for hosted websites.

cPGuard is a comprehensive automated security suite designed for Linux hosting servers that encompasses a manual Malware Scanner, a distributed IPDB firewall, Web Application Firewall, IP and domain reputation check, and brute-force protection against various CMS, among other features.

cPGuard can be installed on Linux Web Servers, with or without control panels, offering enhanced security for all server accounts and simplified management via a centralised UI. It employs intelligent code processing algorithms for server scanning and real-time attack prevention. In the same price bracket, you’ll be hard-pressed to find an alternative boasting such a rich array of features.

How cPGuard could work with Maxer.hu custom control panel servers

The standalone version of the cPGuard security suite exhibits notable flexibility and is compatible with nearly all supported Linux web server platforms. Upon receiving the customer’s specific requirements, we solicited a test environment. This step allowed us to grasp the intricacies of their customized setup and understand the configuration of their web service. Drawing insights from this analysis, we collaborated with the customer to develop supporting scripts for configuring cPGuard Standalone and effecting essential adjustments for integrating the Web Application Firewall (WAF) into their chrooted web server environment. The overall integration process unfolded seamlessly, demanding minimal effort from the customer’s side. This resulted in a smooth adaptation of cPGuard across all their servers.

The final output

Currently, cPGuard is safeguarding the majority of Maxer.hu’s servers, with plans to extend its deployment to their cPanel servers. Our collaboration with Peter and the team has been highly satisfying, and we feel honored to provide our services to Maxer.hu and their valued customers.