Site Security

We offer a number of security solutions to help protect your website.

6G/7G Web Application Firewall

The 6G WAF was originally developed by Jeff Starr at Perishable Press for Apache-based servers.

6G is an excellent lightweight firewall that parses requests for anything anomalous or malicious looking, looking for:

  • Bad Bots
  • Bad Referrers
  • Bad Query Strings
  • Bad Requests
  • Disallowed Request Methods

We have adapted the firewall for Nginx

The 7G firewall is an excellent lightweight firewall that builds upon its predecessors in Jeff’s work over the years.

ModSecurity

The ModSecurity WAF is also available for your site. We use the full OWASP foundation 3+ Core Ruleset (CRS) to protect your sites from a wide array of attack vectors including:

  • SQL Injection (SQLi)
  • Cross-Site Scripting (XSS)
  • Local File Inclusion (LFI)
  • Remote File Inclusion (RFI)
  • PHP Code Injection
  • Java Code Injection
  • HTTPoxy
  • Shellshock
  • Unix/Windows Shell Injection
  • Session Fixation
  • Scripting/Scanner/Bot Detection
  • Metadata/Error Leakages