Security & SSL
Moving from another host? We migrate your site free — and back it with 30 days money-back.Free migration + 30-day money-backSee how
Security & SSL
Certificates, HTTPS, firewalls, malware and compromised sites.
Certificates, HTTPS, firewalls, malware and compromised sites.
Force HTTPS on your site
Redirect all HTTP traffic to HTTPS using the cPanel toggle, a WordPress plugin, or an .htaccess rule, and fix mixed content afterwards.
Install a free SSL certificate
Issue a free certificate for your domains with AutoSSL — including the step most people miss, where domains must be included before AutoSSL will secure them.
Scan your site for malware
Run an on-demand Imunify360 malware scan from cPanel, read the results, and what to do about files it flags.
Scan your account with Virus Scanner
Run cPanel's ClamAV scan across your files or mail, choose the right scan target, and know what it can and cannot find.
Block visitors by country
Restrict site access by country using .htaccess or Cloudflare, and why the second is almost always the better option.
Clear a "Deceptive site ahead" warning
Google blocks a compromised site until it re-checks. Clean it first, then request a review through Search Console.
The cpGuard captcha screen
Why visitors sometimes see a captcha before reaching your site, how long it lasts, and what to do if it loops.
Fix mixed content warnings
Your site has a certificate but the padlock is missing or crossed out. Find the resources still loading over HTTP and fix them.
Disable ModSecurity
Turn off the web application firewall for a domain when it blocks legitimate requests — and why disabling the whole thing is the wrong first step.
Install a wildcard certificate with Let's Encrypt
AutoSSL cannot issue wildcards. Use the Let's Encrypt tool in cPanel for *.example.com, and know the two prerequisites that block issuance.
Unblock an IP address from the firewall
Check whether your IP is firewall-blocked and remove the block yourself from the client area, without opening a ticket.
Clean malware from your website
Remove an infection and close the hole it came through, in the order that stops it returning within days.
Why AutoSSL skips some service subdomains
mail.example.com and cpanel.example.com get certificates on your main domain but not on alias domains. Why, and what to use instead.
What entry processes are
Entry processes count requests being handled simultaneously, not visitors. Why a slow site hits the limit long before a fast one does.
Force HTTPS on your site
Redirect all HTTP traffic to HTTPS using the cPanel toggle, a WordPress plugin, or an .htaccess rule, and fix mixed content afterwards.