Managing SSL Certificates
Manage SSL/TLS certificates for your domains from the Security hub, including your SSL score, AutoSSL, manual installation, and HTTPS redirects.
We log search terms to improve our documentation. For more information, read our Privacy Policy.
security
Blocking and Protecting Your Website
Block IP addresses, configure Hotlink protection, and manage the Web Application Firewall (ModSecurity).
Managing SSH Keys and API Tokens
Manage SSH keys and API tokens to give tools and scripts secure, developer-level access to your account.
Add an Access IP
This interface adds new IP addresses to a list of IP addresses that can access a Manage2 account.
Additional Security Software
This document lists third-party software and modifications that you can install to help secure your server.
AI Assistant Data Handling
The cPanel AI Assistant is a chat panel in the Meridian theme; learn what data it sends and stores, and how to turn it off or delete data.
API Pickup Passphrases
The API Pickup Passphrases interface allows you to create and manage the pickup phrases to use when you authenticate with your Manage2 account.
Basic Security Concepts
This document describes some basic security concepts that you can use to protect your system from XSRF attacks.
Best Practices for Script and Code Permissions
This document explains why you should not run code as the nobody user.
Change Password
This feature allows you to change the password for your Manage2 account.
ConfigServer Security & Firewall (CSF) Change Log
This document provides the list of changes for the ConfigServer Security & Firewall (CSF) plugin.
ConfigServer Security & Firewall (CSF) Release Notes
This document provides release notes for the ConfigServer Security & Firewall (CSF) feature.
cPanel AI Assistant Release Notes
This document provides the list of changes for the cPanel AI Assistant plugin.
cPHulk Management on the Command Line
This document describes how to manage cPHulk from the command line.
CVE 2017 16943 and CVE 2017 16944 Exim
On Friday, November 24 2017, Exim announced two vulnerabilities in versions 4.88 and later.
CVE 2019 7524 Buffer overflow when reading extension header from Dovecot index files
We were made aware of a CVE in Dovecot Versions 2.0.14 - 2.3.5 that involves using Solr on Thursday, March 28th 2019.
CVE-2015-0235-GHOST
On 27 January 2015, a vulnerability in all versions of the GNU C library (glibc) was announced by Qualys.
CVE-2016-1238 Perl
On July 25 2016, Perl announced a vulnerability in all versions of the Perl 5 software.
CVE-2016-1531 Exim
On Wednesday, March 2, 2016, Exim announced a vulnerability in all versions of the Exim software.
CVE-2016-3714 ImageMagick
On Tuesday, May 3 2016, ImageMagick announced a vulnerability in all versions of the ImageMagick software. ImageMagick is a software package commonly used by web services to process images.