What our engineers handle on ModSecurity and WAF
This is the hands-on work, done by a person: the jobs the automatic tools cannot do for you.
- 1Install ModSecurity with the OWASP Core Rule Set and choose a paranoia level
- 2Run in detection mode first, then enforce after tuning
- 3Write narrow exclusions for applications that trigger false positives
- 4Review the audit log for real attacks and report them
Problems we fix
Problem
A contact or checkout form is blocked
What we do
We find the rule that fired, exclude it narrowly for that path and keep the rest active.
Problem
The audit log is huge
What we do
We set logging to what is useful, rotate it and add summaries.
Problem
The site is attacked through a plugin flaw
What we do
We add a virtual patch rule while you update the plugin, then remove it afterwards.
Automatic tools, and our team for the rest
RootManage is automatic server management with every tool in one place. The tools run by themselves on a schedule and report to one dashboard. Everything they cannot do, and every emergency, is handled by our engineers by hand.
Automatic
RootManage tools, running by themselves
- Server Health agent reports load, disk use and failed login attempts to your dashboard.
- Guard watches traffic for abnormal spikes and lets us block or unblock addresses. It is not an internet DDoS scrubber.
- LiteHouse runs a low-priority audit of your website at 04:00 IST and lists findings you can act on.
- Site Clean scans nightly at 03:00 IST for phishing pages, spam scripts and webshells, with suspend, quarantine or delete actions.
Manual, by our engineers
Everything else, and every emergency
- Hands-on work. Fixes, tuning, migrations, upgrades and the other jobs listed above on this page.
- Emergency work. A hacked site, an outage or a failed update is handled by a person who investigates and fixes it, not by a script.
- Things we do not automate. Anything the tools do not cover is done by hand, over SSH, WHM or RDP, on a login you can remove at any time.
The tools are optional, run on Linux servers and are installed by you with one command each. Every job our team does is recorded as a task in your dashboard with the details, and you get an email when it is updated.
How it works
- 1
Sign up
Create an account, choose a plan and add the server you want managed.
- 2
Install the tools
Run one command per tool. They then work by themselves and report to your dashboard. For hands-on work you give us a login you can remove at any time.
- 3
Automatic, with people behind it
The tools watch, scan and back up automatically and alert you. Our engineers do the rest by hand and handle every emergency, and you follow each task in your dashboard.
Questions about ModSecurity and WAF
Does a WAF replace updates?
No. It reduces risk while you update. Outdated software should still be updated.
Do you also use a cloud WAF such as Cloudflare?
We can configure both. A server WAF and a cloud WAF cover different things.
What does it cost to have ModSecurity and WAF managed?
Managed plans start at ₹1,999 a month for one server, and ModSecurity and WAF is managed as part of the server. The pricing page lists what each plan includes. If a server is already infected, the emergency cleanup is a one-time ₹9,000 job.