--- title: Imunify Security for Linux Web Server --- ### Demo Request demoModal [![Imunify-security-logo-001-1](https://trial.imunify360.com/hs-fs/hubfs/Imunify-security-logo-001-1.png?width=167&height=35&name=Imunify-security-logo-001-1.png "Imunify-security-logo-001-1")](https://trial.imunify360.com/?hsLang=en) - [Features](https://trial.imunify360.com#features__filter) - [Product details](https://trial.imunify360.com#landing__why) - [Request Demo](https://trial.imunify360.com#demoModal) - [Pricing](https://trial.imunify360.com#landing__pricing) - [Get Trial](https://trial.imunify360.com#landing__trial) # Keep Linux Servers Protected Against Security Threats - Automatically ## Imunify360 protects Linux-based web servers against threats such as malware and brute force attacks. It does this automatically, through state-of-the-art artificial intelligence and machine learning. **Imunify360 protects servers against:** - Malware on a Server - CMS Account Compromise - FTP/SSH Account Compromise - Mail account Compromise - Website SPAM - Excessive Server Resource Usage [14 DAYS TRIAL](https://trial.imunify360.com#landing__trial) ![WAF](https://trial.imunify360.com/hubfs/WAF.png "WAF") ![antivirus](https://trial.imunify360.com/hubfs/antivirus.png "antivirus") ![IPS](https://trial.imunify360.com/hubfs/IPS.png "IPS") ![protection](https://trial.imunify360.com/hubfs/protection.png "protection") ### Helping over 1000 companies to protect their data [![hostX](https://trial.imunify360.com/hubfs/hostX.png)](https://www.hostxnow.com/) [![hostdime](https://trial.imunify360.com/hubfs/HostDime-Br.png)](https://www.hostdime.com/) [![rack911](https://trial.imunify360.com/hubfs/RACK911_logo.png)](https://www.rack911.com/) [![namecom](https://trial.imunify360.com/hubfs/Namecom-logo.png)](https://www.name.com/) [![fullhost](https://trial.imunify360.com/hubfs/logo-fullhost.png)](https://www.fullhost.com/) [![cwh](https://trial.imunify360.com/hubfs/logo-cwh.png)](https://www.canadianwebhosting.com/) ## Imunify helps different businesses with their cybersecurity ### Choose the description that most closely matches your business - ### [![](https://trial.imunify360.com/hubfs/Host-white.png) Hosting Providers](https://trial.imunify360.com#panel1) - ### [![](https://trial.imunify360.com/hubfs/VPS-white.png) VPS Owners](https://trial.imunify360.com#panel2) - ### [![](https://trial.imunify360.com/hubfs/other-white.png) For Resellers](https://trial.imunify360.com#panel3) ### Hosting Providers #### As a web hosting provider, you have to keep an eye on many aspects of your business. See how Imunify tackles and remedies each kind of web hosting issue. - [![](https://trial.imunify360.com/hubfs/1-color-1.png)](https://trial.imunify360.com#malware) - [![](https://trial.imunify360.com/hubfs/2-color-1.png)](https://trial.imunify360.com#resources) - [![](https://trial.imunify360.com/hubfs/3-color-1.png)](https://trial.imunify360.com#spam) - [![](https://trial.imunify360.com/hubfs/4-color-1.png)](https://trial.imunify360.com#cms-compromises) - [![](https://trial.imunify360.com/hubfs/5-color-1.png)](https://trial.imunify360.com#ftp-compromises) - [![](https://trial.imunify360.com/hubfs/6-color-1.png)](https://trial.imunify360.com#mail-compromises) ### Malware on a Server Malware on a server is one of the major root causes for security issues: it sends out SPAM, it affects server stability and performance, it breaks websites and causes a lot of issues on servers. Imunify360 can effectively keep your server clean with real-time and background scans, and with the ability to clean up detected malware automatically. The Malware Scanner has an extremely high detection rate and minimal false-positive rate. And it performs a safe cleanup process against malicious files to keep websites up and running. ### Excessive Resource Usage on Servers If you have a server with malware, you were probably facing a problem of high CPU load and excessive disk IO operations caused by running malware, or by frequent HTTP requests performed by bad bots or attackers. Imunify360 is able to dramatically reduce server load by blocking or filtering out malicious requests via its Web Application Firewall component with Real-Time Blacklist (RBL) and a proprietary set of ModSec rules on board. Imunify360 also utilizes a Cloud-Based Security service with AI and heuristics that make it possible to correlate incidents and reveal hundreds of thousands of malicious requests across the Imunify customer base to react proactively against attackers and bad bots. In addition, the Imunify DoS plugin and Imunify PAM module block any attempts to hack a user account by brute-force, or scan server for sensitive data. ### Outgoing Mail Spam Outgoing Mail Spam is another reason to check your server for malware. Imunify360 has a cutting-edge signature- and hash-based malware scanner with automated cleanup. It’s able to detect many types of malicious file or malicious code injections on a server including SPAM scripts that causes excessive outbound mail traffic. It has 3 modes: run-time scan (uploaded and modified files), on-demand scan (to scan any arbitrary folder when needed) and background scan (daily/weekly/monthly, configured by admin). If the scanner is configured for a daily scan with the automated cleanup option enabled, it will keep your server malware-free and the mail queue normal. ### WordPress/Joomla/../Drupal Account Compromises Weak passwords set for CMS accounts are usually a nightmare for admins. Hackers and bad bots can easily guess a password with a few attempts using a special dictionary. Imunify360 offers a full set of security components that protect against account compromise. They are WAF with RBL, which is able to block brute-force attacks almost instantly; WebShield with CAPTCHA and SplashScreen, which reveal the real IP address of attacker behind VPN and proxy, and show a SplashScreen or CAPTCHA challenge to bots. And there will soon be a new component called “Weak Password Login Prevention” that checks for compromised passwords and takes the user to a password reset page as a preventive measure. ### FTP/SSH Account Compromises Another popular source of malware infection is an FTP/SSH account compromise. Imunify360 includes a collection of components to handle that. They are OSSEC with Active Response, the Imunify PAM module to block brute-forcers, and the Imunify DoS plugin to limit the number of requests coming to the server during attacks. Imunify360 notifies the owner of a compromised account that they need to reset a password to fix the issue and prevent reinfection of a server. ### Mail Account Compromises If you have a mail server, you might notice a malicious campaign against Exim+Dovecot. Hackers use brute-force techniques to break into a system by constantly checking mail accounts for weak passwords. Imunify360 is able to block brute-force attacks using its PAM module with RBL. Let your clients know they are safe and their mail accounts are protected. ### VPS Owners #### Demand better protection for your site. - [![](https://trial.imunify360.com/hubfs/1-color-1.png)](https://trial.imunify360.com#malware2) - [![](https://trial.imunify360.com/hubfs/5-color-1.png)](https://trial.imunify360.com#ftp-compromises2) - [![](https://trial.imunify360.com/hubfs/4-color-1.png)](https://trial.imunify360.com#cms-compromises2) - [![](https://trial.imunify360.com/hubfs/6-color-1.png)](https://trial.imunify360.com#mail-compromises2) ### Malware on a Server Malware on a server is one of the major root causes for security issues: it sends out SPAM, it affects server stability and performance, it breaks websites and causes a lot of issues on servers. Imunify360 can effectively keep your server clean with real-time and background scans, and with the ability to clean up detected malware automatically. The Malware Scanner has an extremely high detection rate and minimal false-positive rate. And it performs a safe cleanup process against malicious files to keep websites up and running. ### FTP/SSH Account Compromises Another popular source of malware infection is an FTP/SSH account compromise. Imunify360 includes a collection of components to handle that. They are OSSEC with Active Response, the Imunify PAM module to block brute-forcers, and the Imunify DoS plugin to limit the number of requests coming to the server during attacks. Imunify360 notifies the owner of a compromised account that they need to reset a password to fix the issue and prevent reinfection of a server. ### WordPress/Joomla/../Drupal Account Compromises Weak passwords set for CMS accounts are usually a nightmare for admins. Hackers and bad bots can easily guess a password with a few attempts using a special dictionary. Imunify360 offers a full set of security components that protect against account compromise. They are WAF with RBL, which is able to block brute-force attacks almost instantly; WebShield with CAPTCHA and SplashScreen, which reveal the real IP address of attacker behind VPN and proxy, and show a SplashScreen or CAPTCHA challenge to bots. And there will soon be a new component called “Weak Password Login Prevention” that checks for compromised passwords and takes the user to a password reset page as a preventive measure. ### Mail Account Compromises If you have a mail server, you might notice a malicious campaign against Exim+Dovecot. Hackers use brute-force techniques to break into a system by constantly checking mail accounts for weak passwords. Imunify360 is able to block brute-force attacks using its PAM module with RBL. Let your clients know they are safe and their mail accounts are protected. ### For Resellers #### Security, maintenance, efficiency, these are important whether you’re running a web server, or reselling any other kind of Linux-based online services. Look how Imunify makes your infrastructure resilient and profitable. - [![](https://trial.imunify360.com/hubfs/1-color-1.png)](https://trial.imunify360.com#malware3) - [![](https://trial.imunify360.com/hubfs/2-color-1.png)](https://trial.imunify360.com#resources3) - [![](https://trial.imunify360.com/hubfs/5-color-1.png)](https://trial.imunify360.com#ftp-compromises3) - [![](https://trial.imunify360.com/hubfs/4-color-1.png)](https://trial.imunify360.com#cms-compromises3) - [![](https://trial.imunify360.com/hubfs/6-color-1.png)](https://trial.imunify360.com#mail-compromises3) ### Malware on a Server Malware on a server is one of the major root causes for security issues: it sends out SPAM, it affects server stability and performance, it breaks websites and causes a lot of issues on servers. Imunify360 can effectively keep your server clean with real-time and background scans, and with the ability to clean up detected malware automatically. The Malware Scanner has an extremely high detection rate and minimal false-positive rate. And it performs a safe cleanup process against malicious files to keep websites up and running. ### Excessive Resource Usage on Servers If you have a server with malware, you were probably facing a problem of high CPU load and excessive disk IO operations caused by running malware, or by frequent HTTP requests performed by bad bots or attackers. Imunify360 is able to dramatically reduce server load by blocking or filtering out malicious requests via its Web Application Firewall component with Real-Time Blacklist (RBL) and a proprietary set of ModSec rules on board. Imunify360 also utilizes a Cloud-Based Security service with AI and heuristics that make it possible to correlate incidents and reveal hundreds of thousands of malicious requests across the Imunify customer base to react proactively against attackers and bad bots. In addition, the Imunify DoS plugin and Imunify PAM module block any attempts to hack a user account by brute-force, or scan server for sensitive data. ### FTP/SSH Account Compromises Another popular source of malware infection is an FTP/SSH account compromise. Imunify360 includes a collection of components to handle that. They are OSSEC with Active Response, the Imunify PAM module to block brute-forcers, and the Imunify DoS plugin to limit the number of requests coming to the server during attacks. Imunify360 notifies the owner of a compromised account that they need to reset a password to fix the issue and prevent reinfection of a server. ### WordPress/Joomla/../Drupal Account Compromises Weak passwords set for CMS accounts are usually a nightmare for admins. Hackers and bad bots can easily guess a password with a few attempts using a special dictionary. Imunify360 offers a full set of security components that protect against account compromise. They are WAF with RBL, which is able to block brute-force attacks almost instantly; WebShield with CAPTCHA and SplashScreen, which reveal the real IP address of attacker behind VPN and proxy, and show a SplashScreen or CAPTCHA challenge to bots. And there will soon be a new component called “Weak Password Login Prevention” that checks for compromised passwords and takes the user to a password reset page as a preventive measure. ### FTP/SSH Account Compromises If you have a mail server, you might notice a malicious campaign against Exim+Dovecot. Hackers use brute-force techniques to break into a system by constantly checking mail accounts for weak passwords. Imunify360 is able to block brute-force attacks using its PAM module with RBL. Let your clients know they are safe and their mail accounts are protected. ## Features - [Centralized Incident Management](https://trial.imunify360.com#feature1) - [Proactive Defense](https://trial.imunify360.com#feature5) - [Advanced Firewall](https://trial.imunify360.com#feature2) - [Website Reputation Monitoring](https://trial.imunify360.com#feature6) - [Intrusion Detection and Protection System](https://trial.imunify360.com#feature3) - [Patch Management](https://trial.imunify360.com#feature7) - [Malware Detection](https://trial.imunify360.com#feature4) ### Centralized Incident Management More than 52% of hosting providers say that remote exploit is a top issue for their customers’ web servers. With IDS and IPS in Imunify360, you will be protected from inside out and outside in. Imunify360 features an excellent Intrusion Prevention System (IPS) with a comprehensive collection of “deny” policy rules to quickly block all known attacks, especially those using a common or well-known exploit tool. The Intrusion Detection System (IDS) provides excellent visibility of server security by monitoring server logs. It scans log files from all different angles and bans IPs that show malicious signs, such as password failures, potential exploits, etc. It helps protect your server from attacks and reports to the Imunify360 dashboard. [PROTECT YOUR SERVER NOW](https://trial.imunify360.com#landing__trial) ![](https://trial.imunify360.com/hubfs/screenshot-new-1b.png) ### Advanced Firewall Imunify360 offers advanced firewall protection that uses herd immunity and artificial intelligence to detect new threats and protect all servers that run the software. The firewall is capable of defending against brute force attacks, DoS attacks, and port scans. The firewall tightly integrates with mod\_security web application firewalls to dramatically enhance its usefulness. In combination with WAF, we can stop the majority of web application attacks even before they start. An advanced Captcha system is employed to reduce false positives and make sure that valid customers can reach your website. [PROTECT YOUR SERVER NOW](https://trial.imunify360.com#landing__trial) ![](https://trial.imunify360.com/hubfs/screenshot-new-2b.png) ### Intrusion Detection and Protection System More than 52% of hosting providers say that remote exploit is a top issue for their customers’ web servers. With IDS and IPS in Imunify360, you will be protected from inside out and outside in. Imunify360 features an excellent Intrusion Prevention System (IPS) with a comprehensive collection of “deny” policy rules to quickly block all known attacks, especially those using a common or well-known exploit tool. The Intrusion Detection System (IDS) provides excellent visibility of server security by monitoring server logs. It scans log files from all different angles and bans IPs that show malicious signs, such as password failures, potential exploits, etc. It helps protect your server from attacks and reports to the Imunify360 dashboard. [PROTECT YOUR SERVER NOW](https://trial.imunify360.com#landing__trial) ![](https://trial.imunify360.com/hubfs/screenshot-new-3b.png) ### Malware Detection Over 68% of hosting providers say that malware infection is a top issue for their customers’ web servers. ### Security Scanning and Patch Management coming soon Imunify360 will detect outdated software components on your server and can automatically update those components or notify you about them. [PROTECT YOUR SERVER NOW](https://trial.imunify360.com#landing__trial) ![](https://trial.imunify360.com/hubfs/screenshot-new-4b.png) ### Proactive Defense Imunify360's Proactive Defense (previously known as Sandboxing) protects websites against zero-day attacks - it stops even the malware that no scanner is able to detect. It identifies attacks on your Linux web servers in real time, then blocks potentially malicious executions automatically and with zero latency. Proactive Defense uses a unique method of identifying security risks - it analyzes what scripts do rather than what is actually in the code. [PROTECT YOUR SERVER NOW](https://trial.imunify360.com#landing__trial) ![](https://trial.imunify360.com/hubfs/proactive-defense-ui2.png) ### Website Reputation Monitoring We analyze if your site or IPs are blocked by any blacklists and notify you if they are. Your site reputation is very important. For example, if you are added to the Google blacklist as a site that distributes malware, you will be excluded from Google search results, which can be devastating for business. If you get on an RBL list as a spammer, your emails to customers might not be delivered. If you don't proactively monitor your website’s reputation, you might not find out about blacklisting for weeks or even months, at which point the problem could become ruinous. Currently works for domains only, full feature coming soon. [PROTECT YOUR SERVER NOW](https://trial.imunify360.com#landing__trial) ### Patch Management «Quickest turnaround for security patches I have ever seen. This product \[KernelCare\] is #1 at protecting your server’s kernel.» Frank Doud, Owner of G.C. Solutions ![](https://trial.imunify360.com/hubfs/frank-img-001.png) [PROTECT YOUR SERVER NOW](https://trial.imunify360.com#landing__trial) ### Rebootless Secure Kernel Rebootless Secure Kernel powered by KernelCare is a component that keeps your server secure by automatically patching kernels without having to reboot the server. Its agent checks for new patches every four hours and automatically applies them to the running server without any performance impact. KernelCare keeps your kernel updated to help you avoid disastrous incidents. ### Hardened PHP Hardened PHP is a component that ensures your web server security by patching all PHP versions against known vulnerabilities, allowing you to run any version of PHP without having to update programs to accommodate newer versions. ### LibCare coming soon Automatically patches Glibc against vulnerabilities without having to restart the server. ## Why you need to use Imunify ### Proactive Defense™ stops even the malware that scanners are unable to detect! ![IM360-1](https://trial.imunify360.com/hubfs/IM360-1.png "IM360-1") ### Make vulnerabilities on your servers unexploitable Even if you keep the software running on your server secure and up-to-date, your customers don’t. They run applications like WordPress, with dozens of plugins. Some of those plugins, even the most popular ones, will make their site (and your server) more susceptible to hackers. The Proactive Defense feature of Imunify360 protects against these and other unknown vulnerabilities and exploits. ![IM360-2](https://trial.imunify360.com/hubfs/IM360-2.png "IM360-2") ### Defeat new malware before it hits your server Unlike malware scanners that consistently scan and rescan files to recognize already infected files based on signatures, Proactive Defense analyses scripts and recognizes dangerous behaviors in them in real time. It stops malware, both new and old, from running on your servers in the first place. ![IM360-3](https://trial.imunify360.com/hubfs/IM360-3.png "IM360-3") ### An all-in-one solution for 360-degree protection Imunify360 now protects against both known and unknown vulnerabilities, giving you complete, automated security to combat viruses, adware, spyware, Trojans, and worms. The combination of Proactive Defense, Malware Scanning, and WAF ensures that all incoming and existing data and traffic gets scanned for malware and blocked once detected. Installed in just minutes, it starts defending servers instantly. ## Imunify360 is here to change the security concept within shared hosting environments. There are huge advantages in using this tool and we can already see improvements for monitoring, prevention and malicious detection - all of which is done automatically. The number of tickets involving compromised accounts (spam, cryptominers, defacements, and other types of attack) has decreased by 64.6%, and we hope it will decrease even further with the proactive defense. ![HostDime](https://trial.imunify360.com/hs-fs/hubfs/HostDime.png?width=180&height=120&name=HostDime.png) Igor Andrade, Security Analist HostDime Brasil ## Supported Systems ### Imunify360 can be installed on CentOS 6 & 7, RHEL, CloudLinux OS 6 & 7, Ubuntu 16.04 & 18.04, and integrated with cPanel, Plesk and DirectAdmin panels. It could be also installed as a stand-alone version without a hosting panel ### SINGLE USER per server\* $12 per server per month $5 per server with bulk pricing\*\* ### UP TO 30 users per server\* $25 per server per month $10 per server with bulk pricing\*\* ### UP TO 250 users per server\* $35 per server per month $14 per server with bulk pricing\*\* ### UNLIMITED users per server\* $45 per server per month $20 per server with bulk pricing\*\* ## Imunify Security vs Similar Tools | Security Features | ![logo](https://trial.imunify360.com/hubfs/Imunify-security-logo-001-1.png) | Similar Tools | | --- | --- | --- | | Basic Malware Detection | | | | Advanced Malware Detection | | | | Runtime PHP Malware Detection | | | | Safe Malware Cleanup | | | | WAF based on ModSec with proprietary rules | | | | Advanced WAF with RBL and Cloud Heuristics | | | | Anti-brute-force for L7 attacks | | | | Advanced anti-brute-force with PAM support (per account) | | | | Dashboard with Statistics | | | | WordPress account compromise prevention | | | | Extended recommendations on server misconfigurations | | | | Automation and integration via Hooks | | | | Daily Malware DB and Heuristics Updates | | | | Tight integration with cPanel/Plesk/ DirectAdmin | | | | cPanel Native Feature Management support | | | ## Ready to try Imunify? Imunify Security is the best choice for web hosting companies who are serious about security. With an integrated and modular organization, Imunify360 scales with your needs and helps you provide a secure and reliable web hosting service. It’s multi-layered defense architecture ensures precision targeting and eradication of malware and viruses. Number of servers 1-4 servers 5-10 servers 10-50 servers 50+ servers Operating System CentOS CloudLinux OS Ubuntu Debian Other Hosting Panel cPanel Plesk DirectAdmin Other Hosting Panel No Hosting Panel Select your country United States Afghanistan Åland Islands Albania Algeria American Samoa Andorra Angola Anguilla Antarctica Antigua and Barbuda Argentina Armenia Aruba Australia Austria Azerbaijan Bahamas Bahrain Bangladesh Barbados Belarus Belgium Belize Benin Bermuda Bhutan Bolivia Bonaire, Sint Eustatius and Saba Bosnia and Herzegovina Botswana Bouvet Island (Bouvetoya) Brazil British Indian Ocean Territory (Chagos Archipelago) British Virgin Islands Brunei Darussalam Bulgaria Burkina Faso Burundi Cambodia Cameroon Canada Cape Verde Cayman Islands Central African Republic Chad Chile China Christmas Island Cocos (Keeling) Islands Colombia Comoros Congo Congo Cook Islands Costa Rica Cote d'Ivoire Croatia Cuba Curaçao Cyprus Czech Republic Denmark Djibouti Dominica Dominican Republic Ecuador Egypt El Salvador Equatorial Guinea Eritrea Estonia Ethiopia Falkland Islands (Malvinas) Faroe Islands Fiji Finland France French Guiana French Polynesia French Southern Territories Gabon Gambia Georgia Germany Ghana Gibraltar Great Britain Greece Greenland Grenada Guadeloupe Guam Guatemala Guernsey Guinea Guinea-Bissau Guyana Haiti Heard Island and McDonald Islands Holy See (Vatican City State) Honduras Hong Kong Hungary Iceland India Indonesia Iraq Ireland Isle of Man Israel Italy Jamaica Japan Jersey Jordan Kazakhstan Kenya Kiribati Korea Korea Kuwait Kyrgyz Republic Lao People's Democratic Republic Latvia Lebanon Lesotho Liberia Libya Liechtenstein Lithuania Luxembourg Macao Macedonia Madagascar Malawi Malaysia Maldives Mali Malta Marshall Islands Martinique Mauritania Mauritius Mayotte Mexico Micronesia Moldova Monaco Mongolia Montenegro Montserrat Morocco Mozambique Myanmar Namibia Nauru Nepal Netherlands New Caledonia New Zealand Nicaragua Niger Nigeria Niue Norfolk Island Northern Mariana Islands Norway Oman Pakistan Palau Palestinian Territory Panama Papua New Guinea Paraguay Peru Philippines Pitcairn Islands Poland Portugal Puerto Rico Qatar Réunion Romania Russian Federation Rwanda Saint Barthélemy Saint Helena, Ascension and Tristan da Cunha Saint Kitts and Nevis Saint Lucia Saint Martin Saint Pierre and Miquelon Saint Vincent and the Grenadines Samoa San Marino Sao Tome and Principe Saudi Arabia Senegal Serbia Seychelles Sierra Leone Singapore Sint Maarten (Dutch part) Slovakia (Slovak Republic) Slovenia Solomon Islands Somalia South Africa South Georgia and the South Sandwich Islands South Sudan Spain Sri Lanka Sudan Suriname Svalbard & Jan Mayen Islands Swaziland Sweden Switzerland Syrian Arab Republic Taiwan Tajikistan Tanzania Thailand Timor-Leste Togo Tokelau Tonga Trinidad and Tobago Tunisia Turkey Turkmenistan Turks and Caicos Islands Tuvalu Uganda Ukraine United Arab Emirates United States Minor Outlying Islands United States Virgin Islands Uruguay Uzbekistan Vanuatu Venezuela Vietnam Wallis and Futuna Western Sahara Yemen Zambia Zimbabwe   I'd like to receive information about Imunify360. By clicking Get Trial License button, you agree with our [Privacy Policy](https://www.cloudlinux.com/privacy-policy) Try completely free on an unlimited number of servers. We value your privacy. © 2019 All rights reserved. Imunify360 and CloudLinux Backup are the registered trademarks of CloudLinux Inc. Terms of Use Legal ![Soc2-1](https://trial.imunify360.com/hubfs/Soc2-1.png "Soc2-1") [![ClickCease](https://monitor.clickcease.com/stats/stats.aspx)](https://www.clickcease.com)