SWPanel

Security autopilot

What SWPanel does on its own, every night

It blocks whoever attacks via SSH, matches the protection of new services, applies safe CMS and code fixes and those from the Security Bulletin according to your criteria. What could affect your website, it asks you about. And every week it tells you what it has done.

  • Paid per service
  • Configured from SWPanel
  • Cancels at the end of the paid period
dev.swpanel.com › Preferences › Security autopilot Real screenshot
Security autopilot: what SWPanel will do on its own every night
  • 16 Settings in six groups, with search
  • 5 Things it does on its own every night, without you logging in
  • 3 Ways to apply the Bulletin without asking, asking or notifying
  • 1 Report per week on the day you choose

What it does every night

Five tasks, each with its own switch

You turn on the ones you want. Each has its criteria in the account preferences.

Block whoever attacks via SSH

IPs that brute-force SSH access are blocked in each service's FireWall.

Protect new services equally

When you add a service, it tells you which protections the rest of the account has that it lacks, so you can enable them with one click.

Fix CMS and code

It applies the analyzer's safe fixes and tells you what it has done.

Weekly report by email

On the day you choose: the account score, what has changed and what was fixed on its own.

Apply the Bulletin's fixes

When an alert affects your services, it applies the fix according to what you choose.

dev.swpanel.com › Preferences › Security autopilot Real screenshot
Security autopilot: block SSH attacks, protect new services, fix CMS and code, weekly report and Bulletin fixes
  1. Block whoever attacks via SSH.
  2. Protect new services equally.
  3. Fix CMS and code.
  4. Weekly report by email.
  5. Apply the Bulletin's fixes.
  6. 16 settings in six groups.
dev.swpanel.com › Preferences › Security autopilot Real screenshot
The six groups of autopilot settings, with what will be saved and the equivalent API request
  1. What the autopilot does: what it will do on its own every night.
  2. SSH attack blocking.
  3. A version change is always asked about first.
  4. What you're about to save, before saving it.
  5. The equivalent API request.

Automatic fixes

The safe stuff, on its own. The delicate stuff, it asks you

The autopilot doesn't gamble with your website: it applies what doesn't change how it works and consults you on what does.

Fixes it on its own

And tells you what it did.

  • The CMS and code analyzer's safe fixes
  • Those from the Security Bulletin, if you choose “Apply without asking” and they reach the severity you set
  • Blocking IPs that attack via SSH
  • On servers managed by SWPanel, the team applies the patches: “Fixed by systems”

Asks you first

Because it can affect how your website works.

  • A PHP version change
  • A major version of your CMS
  • Patches that restart the server, unless you allow them
  • Bulletin fixes, if you choose “Ask me first”: if you don't answer in time, they aren't applied

On the dashboard

Fix with one click, with the autopilot beside it

The security dashboard brings together what can be fixed right now, with a button, and the autopilot with its switches. If there's nothing to fix, it tells you.

  • Fix with one click
  • The autopilot, on or off from the dashboard
  • Detailed configuration in preferences
  1. Fix with one click: what can be fixed right now.
  2. The autopilot, on the dashboard.
  3. Fix CMS and code, on.
  4. Detailed configuration.
dev.swpanel.com › Security › Security dashboard Real screenshot
Security dashboard: Fix with one click and the autopilot with its switches

Security bulletin

The Bulletin's fixes, your way

When a Bulletin alert affects your services, the autopilot applies the fix according to what you choose.

  • Apply without asking It applies itself and notifies you.
  • Ask me first It waits for your answer for the number of days you set.
  • Only notify me It tells you and you do it.
  • Minimum severity Below it, it only notifies you.
dev.swpanel.com › Preferences › Security autopilot Real screenshot
Bulletin fixes in the autopilot: how they're applied, minimum severity, server restarts and waiting days
  1. Apply without asking.
  2. Ask me first.
  3. Only notify me.
  4. Only from the severity you choose.
  5. Those that restart the server, only if you allow them.
  6. If it asks you, how many days it waits for your answer.
Learn about the Security Bulletin

SSH attacks

Whoever forces the door, out

IPs that fail when trying to log in via SSH are blocked in each service's FireWall, with your exceptions.

SSH attack blocking

Your criteria, in four settings

After how many failures an IP is blocked, over how many days they're counted, which IPs are never blocked and in which services nothing is touched.

  • Block after the number of failures you set
  • Count failures from the last few days
  • IPs or ranges that are never blocked
  • Services where nothing is blocked
  1. Block an IP after the number of failures you set.
  2. Count the failures from the last few days.
  3. IPs that are never blocked, like those of your office.
  4. Services where nothing is blocked.
dev.swpanel.com › Preferences › Security autopilot Real screenshot
SSH attack blocking in the autopilot: failures, days, IPs not blocked and excluded services

What it has done

Every action, logged

In the security dashboard, the autopilot writes down what it has done and when. Every week the summary arrives by email.

Autopilot history

What it did while you slept

The IPs it blocked in each service, the safe fixes it applied automatically, the notices about new unprotected services and the emails it sent.

  • With date and time
  • Service by service
  • The weekly report, on the day you choose
dev.swpanel.com › Security › Security dashboard Real screenshot
What the autopilot has done: IPs blocked via SSH, safe automatic fixes and new service notices

Your account score

The whole account, in one number

The security dashboard scores the account and tells you what lowers it, with a button for each thing.

dev.swpanel.com › Security › Security dashboard › Summary Real screenshot
Security dashboard: account score, compromised and suspicious services, attacking IPs, exploited CVEs and what lowers your score
  1. The account's security score, from 0 to 100.
  2. Compromised, suspicious, attacking IPs and exploited CVEs.
  3. What lowers your score, with the reason why.
  4. See protections: enable them where they're missing.
  5. Status, services, findings, threats, trends, CVEs and Bulletin, in tabs.
PUT /public/account/preferences/ The whole autopilot, also from the REST API: the screen shows you the equivalent request.

Frequently asked questions

Questions about the autopilot

What SWPanel does on its own every night to protect your whole account, with the criteria you set: blocking whoever attacks over SSH, warning you about new services that lack the protections of the rest, applying the safe CMS and code fixes, applying those of the Security Bulletin and sending you a report every week.

It only applies safe fixes on its own and tells you what it did. A PHP version change or a major version of your CMS is always asked first, because it can affect how your website works. With the Bulletin you decide: apply without asking, ask you first or only notify you.

In SSH attack blocking you set the IPs or ranges that are never blocked, and the services where it doesn't block. You decide after how many failures an IP is blocked and over how many days they are counted.

In the security dashboard, under «What it has done», with date and time. And every week, on the day you choose, in the email report: the account score, what has changed and what was fixed automatically.

Yes. The preferences screen shows the equivalent REST API request, with its JSON.

The autopilot works on your account's protections. The ones you don't have active on a service, it suggests so you can turn them on with one click.

Protect your services with Security 360

Add Security 360 to each hosting (€9.75) or Cloud and server (€119.95) you want to protect.