Security

cPanel security guides including IP blocking, SSL, firewalls, and access control

A Complete Guide to ModSecurity and WAF Configuration in cPanel

by

If your cPanel-hosted website has ever been compromised, defaced, or used to distribute malware, you know how devastating a security breach can be. Hackers routinely scan for vulnerable applications, outdated plugins, and weak configurations. Fortunately, cPanel includes a powerful first line of defense that many site owners underutilize: ModSecurity and the integrated Web Application Firewall (WAF). Configuring these tools correctly can block the vast majority of common attacks before they ever reach your application code.

ModSecurity is an open-source web application firewall engine that integrates directly with the Apache web server. cPanel provides a user-friendly interface to manage ModSecurity rules, toggle protections, and create custom rule exclusions. This guide walks you through enabling ModSecurity, understanding the rule sets, whitelisting false positives, and monitoring blocked traffic — so you can harden your server without breaking your site’s functionality.

Read more

How to Fix 403 Forbidden and 500 Internal Server Errors in cPanel

by

Few things are more frustrating than opening your website only to see a blank page with “403 Forbidden” or “500 Internal Server Error.” These errors can stop your business cold — visitors can’t reach you, emails may fail, and if you’re running an ecommerce site, every minute of downtime costs revenue. The good news is that most 403 and 500 errors in cPanel are fixable without needing to contact your hosting provider.

In this guide, we’ll walk through the most common causes of 403 Forbidden and 500 Internal Server errors on cPanel-based hosting, and show you exactly how to diagnose and resolve each one. Whether you’re a site owner or a sysadmin, these troubleshooting steps will get your site back online quickly.

Read more

How to Set Up Automatic Backups in cPanel: A Complete Guide

by

Managing website backups is one of those tasks that everyone knows they should do but far too many put off until it’s too late. If you’re running a cPanel server, you already have a powerful backup system built right into the control panel. The trick is knowing how to configure it properly so your data is protected without wasting disk space or causing performance issues.

This guide walks through every backup option available in cPanel — from the built-in Backup Wizard to full account snapshots and automated third-party integrations. You’ll learn how to set up a backup schedule that actually fits your workflow and how to restore your site when you need it most.

Read more

How to Fix AutoSSL Errors in cPanel: A Step-by-Step Troubleshooting Guide

by

If you manage websites on a cPanel server, you have probably encountered AutoSSL at some point. AutoSSL is cPanel’s automated mechanism for provisioning and renewing free SSL certificates—typically from Let’s Encrypt or cPanel’s built-in Comodo certificate authority. It runs on a daily schedule and attempts to secure every domain and subdomain on the server. When it works, it eliminates the hassle of manual certificate renewals. When it breaks, however, the result can be a confusing wall of warnings in your cPanel interface and, worse, browser security errors for your visitors.

The most common AutoSSL failures include certificates that never provision, domains stuck in “pending validation,” mixed-content warnings after installation, or the dreaded “AutoSSL is currently unavailable” message. Each of these failures has a root cause—often related to DNS propagation, cPanel user permissions, or server-level configuration issues. In this guide, you will learn how to diagnose the most common AutoSSL errors and resolve them without needing to escalate to your hosting provider.

Read more

How to Block IP Addresses in cPanel: IP Blocker, CSF, and cPHulk Guide

by

Why IP Blocking Matters for Your cPanel Server

Every day, automated bots, brute-force attackers, and malicious scanners probe cPanel servers looking for vulnerabilities. Without proper IP blocking, your site wastes resources handling unwanted traffic and risks unauthorized access. cPanel provides built-in tools to block specific IP addresses or entire ranges at the server level — stopping threats before they ever reach your applications.

Whether you’re dealing with a single persistent attacker or a distributed botnet, cPanel’s IP Blocker and firewall integration give you granular control over who can connect to your server. This guide walks through the practical methods for blocking IPs in cPanel, from the easy point-and-click interface to command-line firewall rules for power users.

Read more