{"id":17732,"date":"2026-08-11T07:19:36","date_gmt":"2026-08-11T06:19:36","guid":{"rendered":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/?p=17732"},"modified":"2026-08-11T07:19:37","modified_gmt":"2026-08-11T06:19:37","slug":"how-to-enable-waf-in-cpanel","status":"publish","type":"post","link":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-cpanel\/","title":{"rendered":"How to Enable WAF in cPanel?"},"content":{"rendered":"\n<p>Every cPanel account comes with a built-in firewall called ModSecurity, and most hosts turn it on by default. But occasionally it gets switched off, either by you or your provider, and your website stays exposed until someone flips it back on. If you&#8217;re not sure whether ModSecurity is active or you just disabled it and want it back, here&#8217;s how to turn it on in a couple of minutes.<br><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How Do I Turn On WAF (ModSecurity) in cPanel?<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Step 1: Sign In to cPanel<\/h3>\n\n\n\n<p>Use the URL, username, and password your host issued at signup. The host sends these details in the account confirmation email upon account creation.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 2: Head to the Security Section<\/h3>\n\n\n\n<p>Once you&#8217;re inside cPanel, scroll down to the Security section on the dashboard. Most themes group it near the bottom, though a few hosts move it up top. You&#8217;ll spot several icons here, including one labeled ModSecurity.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 3: Click on &#8220;ModSecurity.&#8221;<\/h3>\n\n\n\n<p>Click that icon and cPanel will load a page listing every domain and subdomain tied to your account. Each one gets its own row, so you&#8217;re not stuck turning the firewall on or off for everything at once.<\/p>\n\n\n\n<p><strong>Related Read<\/strong>: <a href=\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-configure-waf-rules-for-maximum-security\/\"><strong>How to Configure WAF Rules for Maximum Security?<\/strong><\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 4: Pick the Domain You Want to Secure<\/h3>\n\n\n\n<p>Scroll through the list and find the domain you&#8217;re working on. If you manage multiple websites under one account, please take a moment to ensure you&#8217;re selecting the correct one. It&#8217;s easy to pick the wrong one when the list runs long.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 5: Flip the toggle to &#8220;On.&#8221;<\/h3>\n\n\n\n<p>Next to your domain, you&#8217;ll see an On\/Off switch. Click it once to enable ModSecurity. There&#8217;s no save button and no confirmation popup; the change takes effect immediately.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 6: Verify the Update<\/h3>\n\n\n\n<p>The toggle switches to &#8220;On&#8221; beside the domain name. That confirms ModSecurity is running on the domain. Additionally, take a moment to quickly browse the website to ensure that nothing you are running has been mistakenly blocked.<\/p>\n\n\n\n<p><strong>Related Read<\/strong>: <a href=\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-plesk\/\"><strong>How to Enable WAF in Plesk?<\/strong><\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">A Few Important Considerations<\/h2>\n\n\n\n<p>Enabling ModSecurity is one of the simplest ways to enhance website security in cPanel, but it is not a comprehensive solution. If your website uses a page builder, a custom form, or an API, watch your traffic for the next day or so. Occasionally a legitimate request gets flagged as suspicious and blocked. If that happens, your host&#8217;s support team can help you whitelist the specific rule instead of turning the whole firewall off again.<br><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Every cPanel account comes with a built-in firewall called ModSecurity, and most hosts turn it on by default. But occasionally it gets switched off, either by you or your provider, and your website stays exposed until someone flips it back on. If you&#8217;re not sure whether ModSecurity is active or you just disabled it and [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[867],"tags":[],"class_list":["post-17732","post","type-post","status-publish","format-standard","placeholder-for-hentry","category-firewall"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How to Enable WAF in cPanel?<\/title>\n<meta name=\"description\" content=\"Learn how to configure and activate Web Application Firewall rules in cPanel to protect your website from common security threats.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-cpanel\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Enable WAF in cPanel?\" \/>\n<meta property=\"og:description\" content=\"Learn how to configure and activate Web Application Firewall rules in cPanel to protect your website from common security threats.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-cpanel\/\" \/>\n<meta property=\"og:site_name\" content=\"Web Hosting FAQs by MilesWeb\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-11T06:19:36+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-11T06:19:37+00:00\" \/>\n<meta name=\"author\" content=\"Pravin Dahadade\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Pravin Dahadade\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-cpanel\/\",\"url\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-cpanel\/\",\"name\":\"How to Enable WAF in cPanel?\",\"isPartOf\":{\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#website\"},\"datePublished\":\"2026-08-11T06:19:36+00:00\",\"dateModified\":\"2026-08-11T06:19:37+00:00\",\"author\":{\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#\/schema\/person\/8ec3f61c42d57dcdfe230b85246842ad\"},\"description\":\"Learn how to configure and activate Web Application Firewall rules in cPanel to protect your website from common security threats.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-cpanel\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-cpanel\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-cpanel\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Enable WAF in cPanel?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#website\",\"url\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/\",\"name\":\"Web Hosting FAQs by MilesWeb\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#\/schema\/person\/8ec3f61c42d57dcdfe230b85246842ad\",\"name\":\"Pravin Dahadade\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/3dbf83949fba3453ab1d66d34757a110?s=96&d=blank&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/3dbf83949fba3453ab1d66d34757a110?s=96&d=blank&r=g\",\"caption\":\"Pravin Dahadade\"},\"description\":\"With an interest in doing something creative daily. I like to write technical blogs related to web hosting, digital marketing, and other IT topics. Also like to spend leisure time on social media to find different strategies for client engagement.\",\"url\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/author\/pravin-d\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Enable WAF in cPanel?","description":"Learn how to configure and activate Web Application Firewall rules in cPanel to protect your website from common security threats.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-cpanel\/","og_locale":"en_GB","og_type":"article","og_title":"How to Enable WAF in cPanel?","og_description":"Learn how to configure and activate Web Application Firewall rules in cPanel to protect your website from common security threats.","og_url":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-cpanel\/","og_site_name":"Web Hosting FAQs by MilesWeb","article_published_time":"2026-08-11T06:19:36+00:00","article_modified_time":"2026-08-11T06:19:37+00:00","author":"Pravin Dahadade","twitter_misc":{"Written by":"Pravin Dahadade","Estimated reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-cpanel\/","url":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-cpanel\/","name":"How to Enable WAF in cPanel?","isPartOf":{"@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#website"},"datePublished":"2026-08-11T06:19:36+00:00","dateModified":"2026-08-11T06:19:37+00:00","author":{"@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#\/schema\/person\/8ec3f61c42d57dcdfe230b85246842ad"},"description":"Learn how to configure and activate Web Application Firewall rules in cPanel to protect your website from common security threats.","breadcrumb":{"@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-cpanel\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-cpanel\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-enable-waf-in-cpanel\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/"},{"@type":"ListItem","position":2,"name":"How to Enable WAF in cPanel?"}]},{"@type":"WebSite","@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#website","url":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/","name":"Web Hosting FAQs by MilesWeb","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#\/schema\/person\/8ec3f61c42d57dcdfe230b85246842ad","name":"Pravin Dahadade","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/3dbf83949fba3453ab1d66d34757a110?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3dbf83949fba3453ab1d66d34757a110?s=96&d=blank&r=g","caption":"Pravin Dahadade"},"description":"With an interest in doing something creative daily. I like to write technical blogs related to web hosting, digital marketing, and other IT topics. Also like to spend leisure time on social media to find different strategies for client engagement.","url":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/author\/pravin-d\/"}]}},"views":0,"_links":{"self":[{"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/posts\/17732","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/comments?post=17732"}],"version-history":[{"count":2,"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/posts\/17732\/revisions"}],"predecessor-version":[{"id":17734,"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/posts\/17732\/revisions\/17734"}],"wp:attachment":[{"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/media?parent=17732"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/categories?post=17732"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/tags?post=17732"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}