SecurityServer Security
Imunify360 is a server-security platform for web-hosting environments, providing WAF, malware scanning, brute-force protection and behavioural-analysis layers. AIOR provides licensing and managed configuration on eligible plans.
At AIOR
Imunify360 is a security suite designed particularly for shared web-hosting scenarios. It combines WAF, scanning and behavioural-analysis layers for PHP/WordPress attacks and hosting-specific threats.
Its scanner supplements signature-based controls with behavioural and machine-learning layers. This can improve detection of new or obfuscated threats; no security product guarantees prevention of every attack.
1) WAF (Web Application Firewall): ModSecurity-based rules analyse SQL injection, XSS and RCE attempts targeting applications such as WordPress, Joomla, Magento and Drupal; matched requests are blocked or logged according to policy.
2) Malware Scanning: Scans PHP, JS and HTML files within the configured scope and schedule. Detections can be quarantined or sent for expert review according to the selected policy.
3) Brute-Force Protection: AI-detects brute-force attacks on SSH, FTP, cPanel, WordPress wp-login.php and custom apps; auto-bans IPs.
4) Behaviour Analysis (Proactive Defense): Monitors PHP processes at runtime; activity matching malicious behaviour patterns can be stopped when the policy is enabled. This layer complements patching and secure-development controls rather than replacing them.
5) Greylist + Captcha: Suspect IPs can receive a temporary greylist or challenge instead of a permanent ban. False positives are monitored, with allowlists and thresholds adjusted when needed.
6) KernelCare (rebootless patching): Can apply supported Linux-kernel patches without a reboot, reducing the need for planned restarts. Maintenance windows may still be required for major upgrades and unsupported patches.
1) Available with eligible plans. Product details state explicitly whether Imunify360 is included. Licensing and management can be selected separately for VPS or dedicated services.
2) Server-bundled pricing. The current licence fee is shown with the server and management scope in the proposal; volume options are stated separately when eligible.
3) Managed initial configuration. After licence activation, WAF rules, scan schedules and update policies are configured for the server workload; exceptions are reviewed before production use.
4) Use alongside CloudLinux. Imunify360 and CloudLinux can be configured within the same hosting stack. Resource usage and rule impact are monitored and balanced before production.
5) Post-incident response option. Automated quarantine and cleanup operate according to licence and policy scope. Manual-review requests are accepted 24/7; response time, scope and any additional work follow the selected support SLA.
Process
The attack surface and existing protections are reviewed.
Protection rules are tuned with false positives in mind.
Rule impact is verified with access and function tests.
Events and alerts are monitored in AIOR operations.
Licences
All prices in USD. For AIOR server / hosting customers.
Server-service dependency, supply channel, activation method, billing term and entitlements are stated in the current product record and order summary. Ineligible or unverified records are routed to a written quote.
Explore
Security
Write to us through the contact form to clarify scope, cost and timeline; our team will get back to you.
