{"id":34626,"date":"2020-05-11T20:02:35","date_gmt":"2020-05-11T20:02:35","guid":{"rendered":"https:\/\/www.reclaimhosting.com\/?page_id=34626"},"modified":"2026-03-20T16:09:53","modified_gmt":"2026-03-20T20:09:53","slug":"frequently-asked-security-questions","status":"publish","type":"page","link":"https:\/\/www.reclaimhosting.com\/contracts\/frequently-asked-security-questions\/","title":{"rendered":"Frequently Asked Security Questions"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

\u2190 Back to\u00a0Contracts Quick Links<\/em><\/span><\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tIncident Response Plan<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tData Center Certification Report<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Frequently Asked Security Questions<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Security Patches, Updates, Downtime<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWho manages the underlying operating system patches?<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\t

Reclaim Hosting.\u00a0We will ensure that your hardware and software is regularly updated and patched to guarantee consistent performance.<\/span><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tHow often are you applying security patches \/ kernel updates, and when is your patch \/ downtime window?<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\t

Upstream software providers (cPanel, WordPress, etc) have their own schedules with a rolling update pattern that does not follow a set schedule. On client request we can disable automatic updates and instead set a customer-defined window for patching. Except in rare occurrences, security patches and updates to the server do not require any downtime and it is not advised to disable these updates unless you plan to regularly manage this internally.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWho manages application level patches?<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\t

Reclaim Hosting follows Installatron\u2019s timeline<\/span><\/a> for application-level updates. Application-level updates are managed by the end-user. Configuration settings allow for updates to be pushed out automatically or manually after personal testing has been completed.<\/span><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tDoes Reclaim Hosting handle third party vulnerability or penetration testing?<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\t

Reclaim Hosting has protection like active web firewalls, intrusion detecting systems, and active monitoring in place for our environments. Reclaim has penetration testing performed by a credited third-party on it’s internal environment annually. Additionally, we can do penetration testing on Managed Hosting and Domain of One’s Own environments upon request and depending on the nature of the setup this could involve an additional fee. You are also certainly welcome to work with a third party to have this done if you wish.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tAre there any steps being taken to prevent bruteforcing of accounts globally? Or on the site level?<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\t

Reclaim deploys monitoring rules via HIDS agents that work with a customized XDR solution to prevent bruteforcing via common protocols. We are running an infrastructure-wide firewall (Bitninja) and a server-level firewall (CSF) on the server. Both firewalls have settings to block malicious traffic, including repeated requests from IP addresses that are characteristic of a Brute Force attack. Similarly, there is the option to install the mod_evasive module for the Apache web server. While this module is built to mitigate DDoS attacks in particular, both DDoS attacks and Brute Force include repeated requests from IP addresses to the server, and installing it may still be useful. On an account-level, cPanel auto-generates random passwords for all accounts. On an application level, in particular WordPress, we recommend using the Limit Login Attempts Reloaded plugin. This is not included by default, but we can get this added as a default plugin, and install it en masse on existing WordPress sites.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Backups & Restoration<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhat is Reclaim\u2019s role vs. the customer\u2019s role for backup and recovery?<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\t

Reclaim Hosting utilizes the JetBackup platform<\/a><\/span> for full block-level backups of all files and databases on the server captured regularly and stored on a secure offsite server. These can be restored by Reclaim Hosting support staff at the request of the end user, or by the end user within cPanel<\/a><\/span>.<\/span><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tDoes the underlying OS storage utilize full-disk encryption? Are backups encrypted?<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\t

Due to performance reasons we do not enable disk encryption at the server or backup level. cPanel does not support web hosting through an encrypted disk so it is not an option. For backups we do have the option and the customer can choose whether to enable it at the risk that with encrypted backups if there if the master key is lost we will not have access to the backups (for example in a disaster recovery scenario). To learn more, visit this JetBackup documentation on backup encryption.<\/a><\/span><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Data Center \/ Environment<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhere are your datacenters located?<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\t

Reclaim Hosting servers are dispersed amongst many datacenters with our cloud-hosted provider,\u00a0Digital Ocean<\/a><\/span>\u00a0and OVH<\/a><\/span>. If you need your data hosted in a specific location, please let us know.<\/span><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tDoes our quote include a staging or test environment?<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\t

Staging\/testing environments are priced based on the scale of the project, and are added quote upon request.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Misc.<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tHow do your administrators manage the underlying OS? E.g. Ansible\/SSH keys, or similar configuration management? Are those keys rotated on a regular basis?<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\t

We use a dedicated Ansible server with private\/public keypairs for server configuration management in combination with a custom scripts for provisioning. SSH key rotation is part of our information security policy.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tIs the underlying OS running an antimalware solution? Is there an intrusion prevention system in place, e.g. web application firewall? Is there a data loss prevention and \/ or intrusion detection mechanism in place, e.g. Splunk or other similar logging \/ monitoring solution to detect anomalous behavior?<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\t

Malware, intrusion detection, and prevention are all features of Bitninja, the firewall software we use. You can read more about these features at https:\/\/bitninja.io\/features<\/span><\/a><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tIs it possible to have logs sent to our SIEM for the Domain of One's Own environment? (Site access logs, auth logs)<\/a>\n\t\t\t\t\t<\/h3>\n\t\t\t\t\t

The cPanel server is running rsyslogd, which can be configured to forward the logs. If the logs need to be forwarded another way, we will need more information.<\/span><\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

\u2190 Back to\u00a0Contracts Quick Links Incident Response Plan Data Center Certification Report Frequently Asked Security Questions Security Patches, Updates, Downtime Who manages the underlying operating system patches? Reclaim Hosting.\u00a0We will ensure that your hardware and software is regularly updated and patched to guarantee consistent performance. How often are you applying security patches \/ kernel updates, … <\/p>\n

Continue reading “Frequently Asked Security Questions”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":34166,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-34626","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.reclaimhosting.com\/wp-json\/wp\/v2\/pages\/34626","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.reclaimhosting.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.reclaimhosting.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.reclaimhosting.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.reclaimhosting.com\/wp-json\/wp\/v2\/comments?post=34626"}],"version-history":[{"count":58,"href":"https:\/\/www.reclaimhosting.com\/wp-json\/wp\/v2\/pages\/34626\/revisions"}],"predecessor-version":[{"id":45541,"href":"https:\/\/www.reclaimhosting.com\/wp-json\/wp\/v2\/pages\/34626\/revisions\/45541"}],"up":[{"embeddable":true,"href":"https:\/\/www.reclaimhosting.com\/wp-json\/wp\/v2\/pages\/34166"}],"wp:attachment":[{"href":"https:\/\/www.reclaimhosting.com\/wp-json\/wp\/v2\/media?parent=34626"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}