Security Center

About Security Center

The security center WHM home screen button gives you a list of features that will render you able to secure your server better. You can manage password strength, SSH keys, users, and more.

Apache mod_userdir Tweak

This feature provides the ability to view websites on your server. You may want to restrict this type of access mainly because it allows users to circumvent bandwidth limits.

Compiler Access

Disabling C or C++ compilers, compilers which many common attacks require to work, can improve your server’s security significantly. You can enable or disable the compilers of for unprivileged users.

Security Policy Configuration

You can configure three options for you security policy within this feature. You can configure the password age, password strength, and limit the amount of logins to verified IP addresses.

Brute Force Protection

This feature give you access to cPHulk Configuration that will give you protection against brute force attacks. You can configure its settings, manage white/black lists, and see a history report of logins and brutes.

Host Access Control

This feature is one in which you can allow or deny client’s access to cPanel, WHM, Webmail, and WebDav/Web Disk based on their IP address.

Root’s SSH Keys Management

You can control existing SSH keys on your server through this feature. You can also add and import SSH keys to your server using this feature. You can create, import, and manage SSH keys as well as copy an account with SSH keys.

Manage Wheel Group Users

Wheel group is a group that contains users that are able to execute the su command. The su command gives the user “root” access. You can add and remove users to the wheel group.

Configuring Password Strength

You can define minimum strength passwords for all of cPanel’s features that require authentication. By setting minimum strength requirements it better secures your server and functions.

PHP open_basedir Tweak

Preventing users from using PHP to open files outside of their home directory can improve your security. It prevents users from searching file systems using PHP by limiting PHP’s access to the user’s home directory.

Security Scan

This security scan quickly runs through your system to disable operating system-level functions that aren’t necessary for your web server.

Security Advisor and Questions

The security advisor runs a scan on your cPanel and WHM server and advises you on how to fix any security issues that are found through the scan. Security questions gives you the ability to manage security questions. When an attempt to log in is made from an unrecognized IP address then security questions will be used.

SMTP restrictions

This feature allows you to prevent users from bypassing your mail server to sendmail, which is common amongst spammers. You can configure it to where only the mail transport agent, Mailman software, and root usesr are able to connect to remote SMTP server.

SSH Password Authorization Tweak

You can manage your SSH authentication by enabling or disabling passwords. User will be forced to use keys when using SSH if passwords are disabled.

Enable/Disable Traceroute

This network tool can be used to determine the route taken by information sent across the internet. This can be used for pinpointing weaknesses in security in which an attack can stem from.