Caching is one of the most important techniques available to speed your website and save resources. However, sometimes you don’t want to see cached versions of your website, mainly during updating, developing, maintenance and troubleshooting...
If you have issues configuring the Server Side Scanner, you can download your scan verification file from the dashboard and upload it to your site. Log into your Sucuri account. Click on your site, and navigate to Settings>Server Side Scanner...
One of the most common causes of website compromises and malware attacks are due to outdated and vulnerable software. cPanel is one of the most important pieces of software you have running your site, since it allows you to manage and access the...
To improve the security of your site against some types of XSS (cross-site scripting) attacks, it is recommended that you add the following header to your site: X-XSS-Protection: 1; mode=block It is supported by IE (Internet Explorer) and Chrome...
In order to improve the security of your site (and your users), you should enable the HttpOnly flag on all of your cookies. It helps prevent XSS (cross-site scripting attacks) from gaining access to the session cookies via javascript. This is how...
In order to improve the security of your site (and your users), you should disable the TRACE method from your web server. This method has no real-life usage and can be misused for XST (cross-site tracing) attacks. That is how you can disable it on...
Most web servers display its version and modules in use by default. Best security practices recommend that you disable this option, since it can be used to find vulnerabilities of your site. The NIST Guide for Securing Web Servers also recommends it...
In order to improve the security of your site (and your users) against some types of drive-by-downloads, it is recommended that you add the following header to your site: X-Content-Type-Options: nosniff It is supported by IE (Internet Explorer) and...
In order to improve the security of your site against ClickJacking, it is recommended that you add the following header to your site: X-Frame-Options: SAMEORIGIN It is supported by all browsers and prevents an attacker from iframing the content of...
Most web servers allow any user to browse the directories (folders) when no index file is available. This can lead to information leakage and help an attacker when trying to compromise your site. In order to improve your security, you should disable...