Security is an essential aspect at the core of our Platform and we are constantly looking for ways to batten the hatches so you can enjoy a worry-free managed hosting experience. Over the last couple of years, we have significantly improved our policies that govern security including the privacy of our customer data, platform security, and improved frequency of server patching.
With Bot Protection, we are expanding our services when it comes to the security of your website, that too with zero added cost. And keeping true to one of our core values (Simplicity), the Bot Protection can be toggled ON/OFF with just a click.
The growing complexity and the number of bot attacks now contributing 40% of the traffic on the web mean that the threat has become two-fold; bot attacks stress the resources on your server and simultaneously expose security loopholes on your website.
To better address your peace of mind, we have partnered with Akshat Choudhary, founder of BlogVault, to add Bot Protection, powered by MalCare, as a native component in our platform. Bot Protection will essentially identify traffic surges, block malicious traffic, protect your website from attacks, reduce server resource usage, and in addition, provide a detailed traffic report within the Cloudways Platform.
Enabling Bot Protection is simple. Just follow this GIF and you’re good to go:
Bots visit every website, whether good or bad, but this is not a cause of alarm in itself. You should, however, be aware of the share of bots in the total website traffic.
Our Bot Protection offers detailed statistics of the website traffic with a breakdown that clearly indicates the proportion of bots in the overall website traffic.
All bots are not bad, though. In fact, Google itself sends out these bots to crawl your website to index it properly. Therefore, the Bot Protection feature allows you to whitelist the good bots, which gives you greater control over the traffic coming to your site and blocks the bots that you believe can harm your online asset.
Additionally, blocking bad bots also saves up resources on your server, thus cutting down your web hosting cost by reducing the need to scale up a server.
Protection Against Denial of Service Attacks
Another important outcome of the bot traffic management is protection against Denial of Service (DoS) attacks that could paralyze your website and server.
To recall, DoS is an attack on your website with a huge number of automated requests that consume all available server resources which denies legitimate visitors access to the website resources.
DoS attacks are usually launched through bots that rapidly send requests to the server. Since your server cannot differentiate between requests from bots and legitimate visitors, it allocates resources to serve the requests. As the number of requests goes up, the available server resources go down, resulting in slower response times or even crashed servers.
Since Bot Protection provides detailed information about the traffic received on a website, you can identify a sudden spike in traffic from unrecognized (or unwanted) sources and immediately move to block the sources to minimize damage to your website.
Protection Against Brute Force Attacks
Brute force login attacks are another notorious category of threat that can compromise your WordPress websites.
Our Bot Protection displays the list of all login attempts with important details like the login URL and the user name. The information also includes the total number of successful, failed, and blocked login attempts. If you don’t recognize a login attempt, you can simply block the IP to eliminate the chance of someone suspicious trying to hack their way in.
This thwarts various forms of brute force attacks including the dictionary attacks that throw lists of commonly used credentials with the hope that the website administrator or users were careless enough to use weak or compromised credentials.
If all this sounds a bit complicated, don’t worry. We asked the MalCare team to join the Cloudways Mavericks in an exclusive webinar where they explained this Cloudways Platform feature in detail.
In case you are wondering what’s the difference between this feature and the MalCare product, Akshat Choudhary explains it in this tweet:
Our commitment towards you and your businesses continues to determine the direction for our teams. With no additional cost or added complexity, we are making this feature available to all our users.
Bot Protection not only improves the security of your WordPress websites but also provides better value on smaller servers by reducing server resource usage by malicious bots.
With website security a clear priority in our roadmap, we are working closely with MalCare to ensure that we keep on improving the underlying systems so that our customers experience the peace of mind we always promise to deliver.
We would be delighted to answer your questions about how you can use this feature to harden the security of your WordPress websites and ensure a great (and safe) experience for your visitors. You can also submit your feedback about this feature in the comments below.
Start Creating Web Apps on Managed Cloud Servers NowEasy Web App Deployment for Agencies, Developers and E-Commerce Industry.
Ibad Ur Rehman is a WordPress Community Manager at Cloudways. He likes to explore the latest open-source technologies and to interact with different communities. In his free time, he likes to read, watch a series or fly his favorite Cessna 172SP in X Plane 11 flight simulator.