Our Technology

PHP represents more than 79.2% of all server-side scripts. Because of this wide application usage, PHP is constantly exploited by hackers, making sites vulnerable. Our HardenedPHP keeps our users and servers safe by patching all PHP versions against known vulnerabilities – even those versions unsupported by the PHP.net community. Over 100 vulnerabilities, many of which were critical, have been discovered for the unsupported versions of PHP. All have been patched. 

Imunify360 is a completely automated security solution. It includes a distributed Threat Intelligence approach, which processes data reported by all running Imunify360 instances. Upon first cyber-attack or threat detection, Imunify360 provides instant protection. Moreover, we empowered it with heuristics running in the Cloud to make it even stronger. Under its protection, each server gains collective herd immunity because they share threat information in real-time. Our sophisticated detection of known and unknown security threats, including the infamous zero-day and distributed brute-force attacks, delivers robust and comprehensive protection for our servers. Imunify360 analyzes scripts in real-time and recognizes dangerous execution flows. This means you no longer need to watch CVE lists to identify current exploits in your software. Imunify360 stops malicious PHP scripts, both new and old, preventing them from running on our servers. Innovative PHP Immunity technology makes any web application invulnerable even if its vulnerable.

Additionally, Imunify360 shares data with the WAF and antivirus, giving our servers an added layer of protection. A term we use is “herd immunity” – a collective immunity for all the servers based on data related to incidents and attacks accumulated from all server across the globe. Incidents are analyzed in real-time and produce protection rules that are distributed to all servers. Once an attacker is identified, we proactively block malicious activity on all servers. The cloud-based component has a Real-time blacklist server containing blacklisted IP subnets and IPs for specific URL zones used in the WAF RBL module working server-side.

The first layer or Network layer consists of a Web-Application Firewall together (WAF) with WebShield and a Network Firewall. This layer protects against different web attacks sent via HTTP/HTTPS as regular traffic and from a CDN or Proxy. Each component uses cloud-based information, and many attacks are blocked in real-time. Attackers cannot bypass the protection while collecting information. Additionally, the network layer does not wait for attackers to reach a threshold. Imunify360 offers 360 degrees of protection leaving no possibility for the malware to get to the servers. The firewall tightly integrates with the WAF supplied by low false positives rules to enhance its usefulness. In combination with WAF, Imunify360 stops the majority of web application attacks event before they start. An advanced CAPTCHA system and Splash Screen are employed to halt malicious activity and ensure valid customers can reach your website. The WebShield component takes care of CDN and Proxy Traffic by determining the attackers’ real IP-addresses, then differentiates those IP addresses from those of legitimate users. Webshield grey-lists suspicious IPs then provides splash screens and CAPTCHA challenges that prevent malicious requests from harming or even slowing your website or our servers. Lastly, our Network Firewall and Intrusion Detection and Prevention Systems include IP management with a Pluggable Authentication Modules (PAM) extension, Open Source HIDS Security, and Port Firewall that prevents all system service attacks against FTP, SSH, etc. With IDS and IPS in Imunify360, we are protected from inside out and outside in. Imunify360 features an excellent Intrusion Prevention System (IPS) that includes a comprehensive collection of “deny” policy rules that block all attacks. And are effective against those who use custom or well-known exploit tools. By monitoring server logs, the Intrusion Detection System (IDS) provides excellent visibility of server security. It scans log files from several different angles and bans IPs that show signs of malicious activity. This activity includes password failures, potential exploits, brute forcing, etc. 

The final layer of defense occurs at the File-System level during file input/output operations. The file system is where Imunify Antivirus comes into play. A real-time file scanner that checks when a file is loaded onto the server, it is scanned. If it is malicious, it is cleaned. This mitigates the destructive effects on an unprotected system and is most helpful for already infected software. A background (regular) Antivirus program then performs regular file checks in the background to keep your website and our servers clean. And an On-Demand Antivirus is scheduled once per week to check all folders and files against malware. A WordPress database scanner also runs to check WordPress database records against malicious injection of javascript, iframes, and other malicious content and then automatically cleaned if any is found.