SWPanel

Security bulletin

Today's vulnerabilities, with your services included

SWPanel's SOC publishes an alert for each important vulnerability in the software your services use. Each one tells you whether it affects you, explains it without jargon and separates what SWPanel does from what you have to do.

Enable Security 360 See all layers
  • Paid per service
  • Configured from SWPanel
  • Cancels at the end of the paid period
dev.swpanel.com › Security › Security bulletin › Alert Real screenshot
Security Bulletin alert: Debian Apache vulnerability, its CVEs and the affected service, which the SWPanel team fixes
  • 8 Sections per alert from “easy explanation” to references
  • CVE With its CVSS severity and its date, on every alert
  • Affects you Cross-checked with your services and what to do on each one
  • 3 Ways to apply it without asking, asking or just notifying

How it works

From the vulnerability to your service

SWPanel's SOC monitors vulnerabilities in the software your services use and tells you only when it matters.

  1. Publishes

    One alert per important vulnerability, with its CVEs and severity.

  2. Cross-checks

    It compares it with your services and tells you whether it affects you.

  3. Explains

    What happened, why it matters and what to do, in plain language.

  4. Fixes

    SWPanel applies it on its servers, or the autopilot does according to your criteria.

dev.swpanel.com › Security › Security bulletin Real screenshot
SWPanel security bulletin: alerts with component, severity, date, whether they affect your services, whether they're applied and their CVEs
  1. One alert per important vulnerability, published by SWPanel's SOC.
  2. The component: Debian, PHP, a CMS...
  3. The severity, with its CVSS score.
  4. Affects you: cross-checked with your services.
  5. Applied: pending or you have to act.
  6. Export the list.

An alert

Everything you need, in eight sections

It starts with the easy part and ends with the references. At the top, always, your affected services.

dev.swpanel.com › Security › Security bulletin › Alert Real screenshot
Security Bulletin alert: Debian Apache vulnerability, with its CVEs, your affected services and the eight sections
  1. Published by SWPanel's SOC, with severity and whether it affects you.
  2. All the CVEs in the alert.
  3. Your affected services, with what to do on each one.
  4. Eight sections, from “easy explanation” to references.
  5. Easy explanation, no jargon.
  6. Larger text and print.
  1. What happened, explained simply No jargon, so the website owner can understand it.
  2. Why it matters The risks if it isn't fixed.
  3. Does it affect me? The affected versions and how to check yours.
  4. What SWPanel does What the SWPanel team is already doing.
  5. What you have to do The steps, from backup to verification.
  6. Frequently asked questions Whether it costs anything, whether the website could break...
  7. Need help? Open a ticket from SWPanel.
  8. References The CVE at the official source.

Your services

What to do on each one

The same alert doesn't ask the same of a Cloud managed by SWPanel as of a website with its own CMS.

dev.swpanel.com › Security › Security bulletin › Alert › Your affected services Real screenshot
Service affected by an alert: a Cloud with Debian Apache, “We're reviewing it” and “You don't need to do anything”
  1. The affected service and the version it has.
  2. We're reviewing it: the SWPanel team applies the fix on the server.
  3. Update your Cloud from the alert itself.
dev.swpanel.com › Security › Security bulletin › Alert › Your affected services Real screenshot
Service affected by an alert: a website with Moodle, “You have to act” and the button to review and update the website
  1. The affected website and its Moodle version.
  2. You have to act: backup and update to 4.5.9.
  3. Review and update the website from SWPanel.
Pending

The fix is under way. On servers managed by SWPanel, the team applies it: you don't need to do anything.

You have to act

The change is yours, for example updating your website's CMS. The alert gives you the steps and the button to do it from SWPanel.

Fixed by systems

SWPanel has already resolved it on its servers. The alert stays in the Bulletin as a record.

With the autopilot

Have it applied without you logging in

In the security autopilot you decide what SWPanel does when an alert affects your services.

Bulletin fixes

You set the criteria, the autopilot follows them

Choose how they're applied, from what severity and whether you allow those that restart the server for a few minutes. If you choose to be asked, it waits for your answer for the days you set; if you don't answer, it isn't applied.

  • Apply without asking, ask me first or only notify me
  • Only from the severity you choose
  • A PHP version change or a major version of your CMS is always asked about first
  1. Apply without asking.
  2. Ask me first.
  3. Only notify me.
  4. Only from the severity you choose.
  5. Those that restart the server, only if you allow them.
  6. If it asks you, how many days it waits for your answer.
Learn about the autopilot
dev.swpanel.com › Preferences › Security autopilot Real screenshot
Bulletin fixes in the autopilot: how they're applied, minimum severity, server restarts and waiting days

On the dashboard

The Bulletin, next to your account score

The security dashboard has its Bulletin tab, with the status of each alert across your services.

dev.swpanel.com › Security › Security dashboard › Bulletin Real screenshot
Bulletin tab of the security dashboard: alerts with severity, whether they affect you and their status (pending, you have to act, fixed by systems)
  1. Pending: the fix is under way.
  2. You have to act: the change is yours.
  3. Fixed by systems: SWPanel has already resolved it on its servers.
  4. The Bulletin, also on the security dashboard.

Questions about an alert? Ask Instant Help: it explains the alert, tells you whether it affects your services and what to do.

The bulletin, also open to everyone The same alerts, without customer data, on the public website. Anyone can read them and subscribe by email. Read the bulletin

Frequently asked questions

Questions about the security bulletin

The alerts published by the SWPanel SOC when an important vulnerability appears in the software your services use: the operating system, the web server, PHP or a CMS. Each alert says whether it affects you, what SWPanel does and what you have to do.

SWPanel cross-checks it against your services and marks it «Affects you». Inside the alert, «Your affected services» lists each one with its version and what needs to be done.

No. On the servers SWPanel manages, the team applies the fix and the alert says so: «You don't have to do anything». When the change is yours, for example updating the CMS of your website, the alert marks it «You need to act» and gives you the steps.

Yes, with the security autopilot. You choose whether it applies them without asking, asks you first or only notifies you, from which severity, and whether you allow the ones that restart the server. A PHP version change or a major version of your CMS is always asked first.

Yes. Each alert starts with «What happened, explained simply» and «Why it matters». And if you have questions, Instant Help explains the alert and tells you whether it affects your services and what to do.

Yes. The Bulletin can be filtered, sorted, you choose columns and it can be exported. Each alert can be printed.

Keep exploring

Protect your services with Security 360

Add Security 360 to each hosting (€9.75) or Cloud and server (€119.95) you want to protect.

Start for free Security 360 pricing