Filter suspicious web requests
Activate the built-in WAF controls, choose blocking or detection-only mode, and make account-level exceptions when needed.
MAXPANEL FEATURE SPOTLIGHTSecurity tools.
Security tools.
Inside your control panel.
MaxPanel is web hosting control panel software for your server. Manage the web application firewall, review malware findings, and keep website certificates in order from the panel you already use.
You operate the server. MaxPanel brings the controls together.
SECURITY WORKSPACEClear controls.
Practical next steps.
Practical next steps.
Web application firewallChoose how suspicious requests are handled.
Malware scanningReview findings and choose a recovery action.
Website SSLRequest certificates and see their status.
Illustrated controls. Availability depends on host activation.
Turn findings into actions
See which files need attention, move them into quarantine, and review the available cleanup or recovery options.
Make HTTPS easier to manage
Request Let’s Encrypt certificates from the panel and see the status, expiry and renewal information for each website.
EXPLORE THE WORKSPACEDifferent jobs.
Different jobs.
One familiar panel.
Hosts manage server protection. Customers can review their own malware scans and website certificates. Try the examples below.
HOST CONTROLS
Choose how the firewall responds.
A web application firewall checks web requests against security rules. Use blocking mode to reject matching requests, or detection-only mode to log matches while you review compatibility.
Web application firewallExample
- Engine mode
- Detection only
- Account override
- Enabled
- Rule set
- Managed by MaxPanel
Blocking mode selected in this example. Test your websites when changing firewall settings.
ACCOUNT TOOLS
Review the file. Choose the next step.
Run a scan, inspect its findings, and quarantine a detected file from the same workspace. Available recovery options help you decide how to replace or clean affected files.
Malware findingsExample
- Account
- Studio
- Example finding
- Suspicious PHP file
- Status
- Needs review
The example file is now shown in quarantine. This preview does not scan or change any files.
WEBSITE TOOLS
Keep certificate details in view.
Request a Let’s Encrypt certificate for an eligible website. MaxPanel schedules renewals for panel-managed certificates, so routine certificate care stays in your hosting workflow.
Website certificateExample
- Website
- studio.example
- Certificate
- Let’s Encrypt
- Status
- Not requested
Certificate request shown as queued. Real issuance requires a reachable website and successful validation.
Interactive illustration only. No server is connected and no protection settings are changed.
TOOLS FOR THE NEXT STEPMore than a warning.
More than a warning.
A way to respond.
Keep the useful details close to the action, without sending customers through a separate security product.
Scan when it matters
After the host activates the scanner, use on-demand scans, scheduled checks and file-change monitoring to look for known malware.
Quarantine and review
Keep detected files out of the website while you review them. Inspect the quarantine list before choosing whether to restore or delete a file.
Recover a usable copy
Restore an affected file from an available backup, try supported cleanup, or attempt WordPress repair using official source files.
Choose the automatic response
For scheduled and on-demand scans, choose automatic quarantine, supported cleanup, and account suspension for critical findings.
Use your preferred certificate
Generate a certificate request and install a certificate from another issuer when a website needs an externally supplied certificate.
Keep responsibilities clear
Hosts control WAF modes and scanner activation. Account-scoped tools let customers manage the websites and files they are allowed to access.
ACTIVATE WHAT YOUR SERVER NEEDSBuilt-in workflows.
Built-in workflows.
Host-controlled activation.
Turn on the WAF and malware scanner from MaxPanel’s security settings. The panel prepares the required components when needed, and you choose how they operate.
Detection-only mode records firewall matches without blocking them. Blocking mode applies the rules. Keep websites and applications updated alongside these controls.
The host sets the policy
Choose firewall mode, account overrides, and automatic responses to scheduled or on-demand scan findings.
Customers have useful tools
Review their scan results, respond to affected files, and manage website SSL.
Recovery stays a separate decision
Review findings and recovery results. A scan or repair attempt does not prove the whole site is clean.
ABOUT THIS MAXPANEL FEATURESecurity tools,
Security tools,
explained.
Is this a website security service?
MaxPanel is hosting control panel software for your own server. These security tools are part of the panel. You operate the server, activate the tools and decide how to respond to findings.
Are the WAF and malware scanner active immediately?
They are opt-in. The host activates them in security settings, which prepares the required components when needed. The firewall only blocks matching requests in blocking mode; detection-only mode logs matches.
Does malware scanning guarantee a clean website?
No. Signature-based scans look for known malware and can miss threats or flag legitimate files. Review findings and scan results, keep applications updated, and investigate the cause of an infection.
Can MaxPanel clean or repair every infected file?
No. Cleanup supports certain injected code patterns. Backup recovery needs a suitable existing snapshot. WordPress repair attempts to replace supported files from official sources; it does not clean the database or cover every third-party plugin or theme.
Are SSL renewals automatic?
MaxPanel schedules renewal attempts for its managed Let’s Encrypt certificates. Issuance and renewal depend on successful domain validation and certificate-authority availability. Certificates you upload from another issuer need to be renewed and installed by you.
Does this include a CDN or DDoS protection service?
This page covers the controls on your MaxPanel server. Network-level DDoS protection and external security services are separate from these panel features.
Bring protection and recovery
into your control panel.
Give your hosting team and customers clear tools for the server you operate.