--- title: "Security Overview" source: "https://docs.nexcess.com/hosting/security/" description: "Robust solutions for data protection and server security." vertical: "Hosting" date: "2024-11-01" last_modified: "2026-08-26" --- # Security Overview Security isn’t a single setting you flip on once. It’s a process that touches every layer of your stack, from account passwords to network firewalls and SSL/TLS. Our security articles cover four main pillars of security: 1. **Account & Access** – lock down logins with strong passwords, two-factor auth, and secure notes. 2. **Network Protection** – shield ports with Cloud Firewall rules and VPN tunnels before traffic even hits your server. 3. **Server Hardening & Monitoring** – minimize attack surface (services, permissions, file-system tweaks) and run scheduled vulnerability scans. 4. **Encryption & Certificates** – keep data in transit private with correctly installed, auto-renewing SSL certificates. --- Security Articles 84 results This collection of articles serves as your central resource for understanding, and managing the security of your Liquid Web account, server and websites. [Antivirus Defend your server against malware with our antivirus guides. Learn how to install, configure, and manage ESET, ClamAV, ImunifyAV, and Imunify360. 5 articles](https://docs.nexcess.com/hosting/security/antivirus/)[Bot Management Learn to manage web bots. Our guides help you block bad bots, allow good ones, and secure your site. Control your website's… 4 articles](https://docs.nexcess.com/hosting/security/bot-management/)[Firewall Management A firewall is your server's first defense. Learn how firewalls block threats, the types available, and how to configure them for robust… 23 articles](https://docs.nexcess.com/hosting/security/firewall-management/)[Rootkit Detection Rootkits are stealthy malware that hide deep in your OS. Learn how to use specialized tools to detect and remove these dangerous… 1 article](https://docs.nexcess.com/hosting/security/rootkit-detection/)[Security Compliance Navigate security compliance. Learn about HIPAA, PCI, and GDPR and find hosting solutions to help protect sensitive data and meet your legal… 3 articles](https://docs.nexcess.com/hosting/security/security-compliance/)[SSL Certificates Guide Secure your site with SSL. Our guides explain what SSL certificates are, how to install them, and how to build trust by… 28 articles](https://docs.nexcess.com/hosting/security/ssl/)[TLS Hardening Go beyond basic SSL. TLS hardening strengthens your server's encryption by disabling weak protocols and ciphers to protect against modern attacks. 1 article](https://docs.nexcess.com/hosting/security/tls-hardening/) ## Articles [A Liquid Web customer’s guide to vulnerability scans Vulnerability scans are an important part of maintaining your server's security, especially in today's online threat landscape. Learn how to leverage them…](https://docs.nexcess.com/hosting/security/guide-to-vulnerability-scans/)[Best Practices: Creating a Secure Password Secure your website and logins. Learn the rules for creating a long, complex, and unique password and find the best practices for…](https://docs.nexcess.com/hosting/security/best-practice-creating-a-secure-password/)[Best Practices: Protecting Your Email Accounts from Compromise You've learned about computer security, website protection, and secure passwords. Now, safeguard your email accounts from compromise.](https://docs.nexcess.com/hosting/security/best-practices-protecting-your-email-accounts-from-compromise/)[Best Practices: Protecting Your Website from Compromise To enhance security, adopt best practices to safeguard your website. Consider Liquid Web's additional security services for added protection.](https://docs.nexcess.com/hosting/security/best-practices-protecting-your-website-from-compromise/)[Best Practices: Securing Your Computer Securing your passwords and data is vital for site security. Protect your computer, keep software updated, and safeguard login credentials to prevent…](https://docs.nexcess.com/hosting/security/best-practices-securing-your-computer/)[Best Practices: Setting a Required Password Strength A strong server password is crucial to prevent data loss. Use a mix of characters, avoid dictionary words, and lengthen your password.…](https://docs.nexcess.com/hosting/security/best-practices-setting-a-required-password-strength/)[Disabling Anonymous FTP Protect your server from malicious attacks. Learn how to disable Anonymous FTP logins and uploads in WHM with this quick configuration guide.](https://docs.nexcess.com/hosting/security/disabling-anonymous-ftp/)[Disabling Recursive DNS in BIND Disabling recursive DNS requests is crucial to prevent amplification attacks.](https://docs.nexcess.com/hosting/security/disabling-recursive-dns-in-bind/)[How to use the Liquid Web Secure Password Generator Learn how to use the Liquid Web Secure Password Generator to create a secure password or evaluate one. It is critical that…](https://docs.nexcess.com/hosting/security/how-to-use-the-nexcess-secure-password-generator/)[Password Help Find guidance on managing passwords for your Liquid Web systems.](https://docs.nexcess.com/hosting/security/password-help/)[Using cPHulk to Prevent Brute-Force Attacks cPHulk is an added security feature in WHM, blocking login attempts in various services without affecting regular traffic.](https://docs.nexcess.com/hosting/security/using-cphulk-to-prevent-brute-force-attacks/)[Using mod_qos and mod_reqtimeout to mitigate Slowloris attacks Protect your Apache server from Slowloris attacks. Learn how to install and configure mod_qos, set up connection limits, and integrate with CSF.](https://docs.nexcess.com/hosting/security/using-mod_qos-and-mod_reqtimeout-to-mitigate-slowloris-attacks/)[What are CVEs and How are They Scored? Common Vulnerabilities and Exposures listings, or CVEs, is a system of classifying vulnerabilities including a numeral score describing its severity.](https://docs.nexcess.com/hosting/security/what-are-cves/)[What are the advantages of using SSH keys to control access for multiple users? SSH keys offer a means for site administrators to allow multiple individuals to share one user and all associated permissions while remaining…](https://docs.nexcess.com/sites-stores/security/ssh-keys-for-access-control/)[What is “Least Privilege”? Secure your server using the Principle of Least Privilege (PoLP). Learn how restricting user access prevents malware and how to manage file…](https://docs.nexcess.com/hosting/security/what-is-least-privilege/)[What Is a Brute-Force Attack? Brute-Force Attacks: Attackers try all possible password combinations, using scripts, to access data. Growing threat due to faster hardware.](https://docs.nexcess.com/hosting/security/what-is-a-brute-force-attack/)[What Is a Denial-of-Service (DoS or DDoS) Attack? Denial-of-Service (DoS) attacks flood a server with traffic, preventing legitimate users from accessing a website. Learn to mitigate network-focused DoS attacks in…](https://docs.nexcess.com/hosting/security/what-is-a-denial-of-service-dos-or-ddos-attack/)[What Is an .htaccess File? Apache servers use .htaccess files to configure websites without altering server settings. Apply distinct settings per directory via multiple .htaccess files, created…](https://docs.nexcess.com/hosting/security/what-is-an-htaccess-file/)[What is Server Hardening? Server hardening strengthens security by enhancing various aspects, making your environment far more secure. Default configurations prioritize usability and functionality, not security.](https://docs.nexcess.com/hosting/security/what-is-hardening-your-server/)