Activating a NordVPN subscription purchased through Nabtech A NordVPN subscription protects the connection between a supported device and the VPN service. Activate the entitlement attached to your order before…

Activating free SSL and resolving HTTPS warnings Our Web Hosting product includes free SSL, allowing supported domains to use HTTPS once the certificate requirements are satisfied. HTTPS encrypts the…

Activating SiteLock and checking your website protection SiteLock packages can provide different combinations of scanning, cleanup and firewall protection. Check your purchased plan before configuring it. A…

Adding a narrow sender exception in SpamExperts Add a sender exception in SpamExperts only for a defined legitimate need. Verify the real sender and investigate repeated false positives before…

Adding a SiteLock trust seal without making misleading claims Use the SiteLock-generated trust seal for the website it belongs to, and verify that its linked details show the correct domain. The seal reports the…

Adding Cloudflare Turnstile with mandatory server-side verification Turnstile can protect a form from unwanted automated submissions, but the server must validate each token before accepting the operation. Displaying a…

Adding or removing names from a multi-domain certificate Changing a multi-domain certificate requires a planned reissue and deployment. Adding a hostname to DNS or the hosting panel does not add it to an…

Adjusting Cloudflare Challenge Passage Challenge Passage controls how long a visitor who successfully completes an eligible Cloudflare challenge can avoid repeating that challenge. It uses a…

Applying an available rate-limit rule to an abused login endpoint A rate-limit rule can reduce repeated requests to an abused login endpoint. Design it from normal traffic and the available plan controls so shared…

Applying Ubuntu Server security updates with a restart plan Apply Ubuntu Server security updates with an explicit service-restart and reboot plan. Installing packages does not always replace code already running…

Binding an HTTPS certificate to an IIS website Bind a valid server certificate to the intended IIS website so clients can authenticate the hostname and establish HTTPS. The certificate must already…

Blocking a specific IP address with current Apache access rules An IP-based rule can prevent requests from a known address from reaching part of a website. It is useful for a specific abusive source, but dynamic…

Blocking an unwanted sender in SpamExperts Use a SpamExperts sender block entry for repeated unwanted mail from a known address or domain. First distinguish the sender you want to block from the…

Blocking an unwanted website visitor with cPanel IP Blocker IP Blocker restricts website access from an address or range. It is a web access control, not a server firewall, and it does not by itself block that…

Changing a user's role without losing content ownership Changing a WordPress user's role adjusts their capabilities while keeping the account and its content attribution. Review the new permissions and any…

Changing a WHM server hostname with DNS and certificate checks The server hostname identifies WHM and other system services and can appear in mail headers. Change it through the supported cPanel workflow so…

Changing the public display name of a WordPress user Your public display name controls the author label shown by many WordPress themes and comments. It can be changed from your profile without changing the…

Changing your WordPress account password Change your WordPress password from your profile when you can sign in. If you cannot sign in, use the login screen's password reset workflow for the…

Checking HTTPS after enabling a website security proxy A security proxy creates two connections to check: the browser connects to the proxy, and the proxy connects to the hosting origin. A valid public…

Checking the destination mail server behind SpamExperts The SpamExperts destination is the server that receives mail after filtering. It must point to the actual mailbox service. Pointing it back to the…

Checking which messages an email archive actually captures Verify what SpamExperts archiving captures before relying on it for business record retention. Incoming filtering, outgoing filtering and archiving are…

Checking which names a wildcard certificate protects A wildcard such as *.example.com covers a single leftmost label, such as shop.example.com. Check the actual certificate's subject alternative names…

Choosing an SSL certificate for the names your website uses A TLS certificate, often sold as an SSL certificate, helps browsers establish an encrypted connection to a named service. Choose it by the hostnames you…

Choosing Cloudflare bot controls that fit the site and plan Cloudflare’s bot products differ in available controls and exception support. Choose settings that fit both your subscription and your legitimate…

Choosing which cPanel hostnames AutoSSL should manage AutoSSL inclusion determines which eligible hostnames participate in automatic certificate management. Excluding a hostname can stop future automated…

Closing comments on selected posts Close comments on a post when it should no longer accept new discussion while preserving its existing content. This is different from deleting existing…

Complete HostBill security settings after installation Complete HostBill's security configuration before accepting real customer information. The work involves application access, private files and…

Complete the WHMCS security checks after installation Complete the security configuration of a self-hosted WHMCS installation before accepting customer accounts or payments. Treat the application, its…

Completing a certificate authority's DNS validation request DNS certificate validation proves control by publishing the certificate authority's exact challenge. It is useful when the website is not live yet or…

Completing certificate domain validation by email Email domain validation works when an authorised person receives and approves the certificate authority's challenge for the exact pending order. Use an…

Completing HTTP file-based certificate validation File-based certificate validation requires the issuer's challenge to be publicly available at the exact URL it specifies. Uploading a text file…

Completing SiteLock website ownership verification Complete the ownership check shown for the exact website in your SiteLock account. A paid order and a working website do not, by themselves, prove that…

Configuring a useful SpamExperts quarantine report Email Scout Reports summarise messages matching a defined SpamExperts search. Configure the scope and recipient carefully so a quarantine digest does…

Configuring comment moderation and disallowed words Discussion rules can hold suspicious comments for review or classify them according to the site's configured policy. Use precise rules and review false…

Configuring Django hosts and CSRF origins behind HTTPS Django checks hostnames and browser request origins to protect application requests. A production hostname or proxy change must preserve these checks…

Configuring NordVPN auto-connect for a supported device Configure NordVPN to connect automatically on the network types you choose, then test that behaviour after reconnecting or restarting. Auto-connect…

Configuring outgoing filtering and investigating blocked messages Outgoing filtering helps detect unwanted or malicious mail before your server sends it to recipients. It is useful for protecting sending reputation,…

Connect deSEC while preserving its DNSSEC and delegation requirements deSEC signs the zones it serves and manages their signing keys. Domain Nexus exposes that provider behaviour rather than pretending it can turn a deSEC…

Coordinate a DNSSEC key rollover with the registrar's DS update A DNSSEC key rollover replaces signing keys while allowing cached trust information to remain valid during the transition. A KSK or combined signing key…

Creating a certificate signing request in Plesk For a certificate ordered outside an automated Plesk workflow, generate a CSR in the domain's certificate repository and retain its matching private…

Creating a limited Cloudflare API token for DNS automation A scoped Cloudflare API token lets an integration manage only its required resources. For DNS automation, restrict the token to the relevant zone and…

Creating a narrowly scoped Cloudflare WAF custom rule A Cloudflare WAF custom rule should match a clearly defined unwanted request pattern. Start with the smallest hostname, path and condition that…

Creating a narrowly scoped Windows Firewall rule Create a Windows Firewall rule for the specific service, port and remote sources that need access. Confirm the application is listening first: a…

Creating a WordPress user with the right role Create a separate WordPress user for each person and assign the least role needed for their work. This makes access easier to review and revoke without…

Creating and revoking WordPress application passwords An application password lets an approved integration authenticate to WordPress without storing your normal interactive login password. Create a separate…

Deactivating a SiteWorx user while preserving the account Deactivating a secondary SiteWorx user stops the intended panel access while preserving a reversible account record. Complete a separate credential…

Delegate certificate DNS validation without exposing the main zone credential DNS-01 certificate validation proves control through a TXT record at an _acme-challenge name. A supported CNAME or NS delegation can move that challenge…

Delegating SiteWorx access to a secondary user A secondary SiteWorx user can perform selected account-management tasks without receiving the master login. Assign only the required permissions and…

Deleting an unused CSR from cPanel Deleting a stored CSR removes that request from cPanel’s request list. It does not revoke an issued certificate, uninstall HTTPS or automatically delete…

Diagnose DNSSEC validation failures that appear as SERVFAIL DNSSEC validation can turn an otherwise visible DNS answer into SERVFAIL when the chain of trust is broken. A stale parent DS record, missing DNSKEY,…

Diagnosing a legitimate request blocked by ModSecurity in cPanel ModSecurity is a web application firewall that can block suspicious requests before the application handles them. A legitimate upload or form submission…

Diagnosing a pending Cloudflare edge certificate An edge certificate protects the browser-to-Cloudflare connection. If its status remains pending, investigate domain activation and certificate…

Diagnosing Cloudflare error 525 during the origin TLS handshake Cloudflare error 525 means its TLS handshake with the origin failed. The browser may already have a valid connection to Cloudflare, so focus on the…

Diagnosing Cloudflare error 526 with Full strict TLS Cloudflare error 526 indicates that the origin certificate cannot be validated for the requested strict TLS connection. Inspect the certificate actually…

Diagnosing Linux TLS errors caused by trust or clock problems TLS failures on a Linux client can come from a wrong clock, hostname mismatch, incomplete server chain or an inappropriate trust store. Identify the…

Diagnosing Rails host authorization and HTTPS redirect loops A Rails app behind a proxy needs consistent host and HTTPS information. Host authorization failures and redirect loops should be fixed at the relevant…

Disabling directory listing and protecting private files Directory listing can reveal filenames when a directory has no default index page. Disabling listing prevents that automatic index from being shown, but…

Distinguishing spam comments from genuine customer feedback Review a comment's relevance, intent and links before classifying it as spam. Genuine criticism, a short question or imperfect language should not be…

Enable optional website insights, malware and performance tools Several website manager features depend on server software or an external service. Configure and test each integration separately so customers see…

Enabling DNSSEC for a Plesk-managed zone DNSSEC lets validating resolvers verify signed DNS answers. A Plesk-signed zone needs a matching delegation signer record in its parent zone to…

Enabling HSTS only after all required hostnames support HTTPS HSTS tells browsers to require HTTPS for a period of time. Enable it only after HTTPS is reliable, because cached HSTS policy can keep a site…

Enabling SiteWorx two-factor authentication SiteWorx two-factor authentication adds a time-based code to the user’s panel login. Configure it using a trusted authenticator and keep an authorised…

Enabling two-factor authentication for a cPanel login cPanel two-factor authentication adds a time-based code to the panel login after the password. It protects that login flow; our client area, mailbox…

Enabling two-factor authentication for WHM administration Two-factor authentication adds a time-based code to supported WHM interactive logins. Configure it for each administrator and retain a controlled…

Enabling two-factor authentication in Webmin Enable two-factor authentication for Webmin administration so the browser login needs both the account credential and an enrolled second factor. Use a…

Ending other WordPress login sessions End other WordPress browser sessions when you have finished using a shared device or suspect an old login should no longer remain active. Session…

Exporting personal data through WordPress privacy tools WordPress's personal-data export tool can gather information associated with a verified person from core and participating plugins. It is different from…

Exporting selected archive messages for an authorised request Export the specific archived messages required for a migration or authorised review. The current hosted-cloud workflow uses log search; the old…

Finding a held message in SpamExperts quarantine Use the SpamExperts quarantine to find messages held by the filtering service before delivery. It is separate from the Spam folder inside OX, Zoho,…

Finding and copying an existing CSR in cPanel You can retrieve a previously generated certificate signing request from cPanel when a certificate order needs it again. Choose the request associated…

Finding and correcting mixed content on an HTTPS website Mixed content occurs when an HTTPS page requests resources over insecure HTTP. Fix the resource references in the application so images, scripts,…

Finding mixed content when HTTPS works through Cloudflare Mixed content occurs when an HTTPS page requests assets through HTTP. The main certificate can be valid while browsers block scripts, styles, images or…

Fixing a certificate hostname mismatch A hostname mismatch means the certificate presented by the server does not cover the name the client requested. Find the requested name and the…

Fixing a Cloudflare HTTPS redirect loop A redirect loop occurs when Cloudflare and the origin disagree about the expected scheme or hostname. Trace the actual Location responses before…

Fixing an incomplete certificate chain An incomplete certificate chain means a client cannot build the required trust path from the website certificate to a trusted root. A certificate can…

Fixing valid-recipient rejection in incoming filtering SpamExperts can check whether a recipient exists before accepting mail for delivery. If a new mailbox receives a recipient error, verify the…

Generating a certificate signing request in cPanel A certificate signing request, or CSR, contains the public-key and identity information needed by a certificate issuer. It is different from the private…

Getting a free HTTPS certificate for a cPanel website An eligible cPanel website can use the server’s AutoSSL service to obtain and renew a domain-validated certificate. HTTPS protects the connection to the…

Install Domain Nexus in WHMCS and initialise its secure storage Install the current Domain Nexus release in a backed-up WHMCS environment, initialise its protected keys and verify the scheduled worker before enabling…

Installing a Cloudflare Origin CA certificate and understanding its trust Cloudflare Origin CA certificates secure traffic between Cloudflare and a proxied origin. They are not ordinary public-browser certificates, so plan…

Installing an issued certificate through cPanel Install the issued certificate in the cPanel account serving the website, using its matching private key and the issuer's current intermediate chain.…

Installing and assigning an issued certificate in Plesk Use the supported Plesk upload path for your certificate files, then confirm that the website is serving the new certificate. Plesk Obsidian commonly…

Interpreting an outgoing-filter rejection message Use the complete SMTP response to diagnose outgoing mail rejected through SpamExperts. Authentication failure, a locked identity, content classification…

Investigating a certificate warning in an email application A mail certificate warning concerns the server your application is connecting to. Compare that configured server name with the certificate it presents,…

Investigating a Cloudflare WAF false positive with Ray IDs When a legitimate action is blocked, use its Ray ID and request time to identify the Cloudflare control responsible. A precise exception is easier to…

Investigating a DirectAdmin brute-force block DirectAdmin Brute Force Monitor records repeated authentication failures and can work with configured blocking controls. Investigate the actual service…

Investigating a legitimate request blocked by a website firewall Investigate a blocked legitimate request by matching the visitor's failure to a specific firewall event. The objective is to restore the required action…

Investigating a slow connection while NordVPN is active Compare like-for-like measurements to identify why a NordVPN connection feels slow. The local network, chosen server, route, protocol and destination…

Investigating malware and recovering a WordPress website Treat a malware alert or unexpected website behaviour as a reason to investigate promptly. Our NabWP workspace can provide malware status, scanning and…

Investigating queued incoming mail during an outage The incoming delivery queue holds mail the filter has accepted but cannot currently deliver to the destination. A queue is different from quarantine:…

Investigating TLS delivery failures through email filtering Review both inbound TLS connections when requiring encrypted delivery through SpamExperts: the sender to the filter, and the filter to your mailbox…

Inviting contributors without sharing administrator credentials Give a contributor their own account and a clear submission workflow instead of sharing an administrator login. This preserves accountability and keeps…

Issuing a website certificate in Webuzo Issue a website certificate through Webuzo Automatic SSL after the domain points to the intended service and can complete validation. A valid…

Issuing an automatic TLS certificate in DirectAdmin DirectAdmin can request and renew ACME certificates for hosted domains when that capability is enabled. The certificate names must match the actual…

Issuing and renewing a certificate with Plesk SSL It Plesk SSL It can request and manage a certificate for the hostnames used by a website. Include only names you control and can validate. Certificate…

Keeping business services under the right account ownership Keep business services under documented business control, with named people authorised to administer them. The person who built the website should not…

Limiting shared directory credentials with Leech Protection Leech Protection can respond to unusual login activity in directories protected by HTTP credentials. It is available only in supported server…

Managing separate edge and origin certificates for a CDN Track edge and origin certificates separately when a CDN or security proxy handles HTTPS. The edge certificate serves visitors; the origin certificate…

Managing SolusVM login alerts and account security Login notifications help you notice unexpected access, but they do not prevent it. Current SolusVM installations also support two-factor authentication,…

Moderating comments before publication Comment moderation lets an authorised editor review submissions before they appear publicly. Configure the site's discussion policy, then maintain the…

Moving a Cloudflare site to Full strict TLS safely Full (strict) encrypts the Cloudflare-to-origin connection and validates the origin certificate. Use it after every relevant origin presents an…

Operate DNSSEC from zone signing through parent DS verification DNSSEC requires a signed authoritative zone and a matching chain of trust at its parent. Domain Nexus can manage signing on supported backends, but the…

Password-protecting a website folder with cPanel Directory Privacy Directory Privacy places a browser login in front of a website folder, making it useful for a private preview or restricted document area. It protects…

Planning a staff departure across email and shared files Plan a staff departure across email, shared files and connected applications before deleting the account. The business needs to remove access at the…

Planning email archiving, retention and authorised searches Email archiving preserves messages according to the archive service's configured scope and retention. It is different from an inbox, a spam quarantine…

Planning HSTS after every required hostname works with HTTPS Enable HSTS only after the required website names work reliably over HTTPS and certificate renewal is under control. HSTS tells supporting browsers to…

Planning origin access restrictions behind Cloudflare Origin access restrictions can prevent ordinary visitors from bypassing Cloudflare and reaching the web server directly. Implement them with the hosting…

Prepare Route 53 KMS permissions before enabling DNSSEC Route 53 DNSSEC depends on a key-signing key backed by a suitable AWS KMS customer managed key. Prepare that key and its permissions before asking…

Preparing a website for an eligible SiteLock firewall service An eligible SiteLock firewall service sits in the website traffic path. Prepare the origin, HTTPS and DNS change together so visitors continue reaching…

Preparing email and collaboration access for a new employee Prepare a new employee's email and collaboration access from an approved role request. Giving each person an individual account makes access changes,…

Preventing comment form abuse without blocking all visitors Reduce comment abuse with targeted moderation and supported anti-spam controls, then test that ordinary visitors can still participate. Broad…

Preventing unintended directory listings in cPanel A directory listing can expose filenames when a website folder has no index page. cPanel’s Indexes control can disable that listing, but sensitive files…

Preventing unwanted image hotlinking with cPanel Hotlink Protection can restrict other sites from embedding selected files hosted on your account. It can reduce unwanted bandwidth use, but it is not…

Processing a WordPress personal-data erasure request WordPress's erasure tool can remove or anonymise eligible personal data from core and participating plugins after a verified request. Review the scope…

Protecting .htaccess and configuration files from public downloads A public request for .htaccess should not return the file contents. This file can reveal rewrite paths or access rules, and nearby configuration files…

Protecting a Plesk account with two-factor authentication Multi-factor authentication adds a second verification step to a Plesk account. Current supported Plesk releases use the Multi-Factor Authentication…

Protecting a SiteWorx preview directory with a browser password A browser password can protect a preview directory before the website is public. SiteWorx’s Htaccess tools manage this directory authentication…

Protecting your Web Hosting website and responding to a compromise Our Web Hosting environment combines hosting-level protections with account tools that help you manage your own website's security. Depending on the…

Providing the access needed for eligible SiteLock cleanup File scanning and eligible cleanup require a working connection to the website files. Configure the access requested by your purchased SiteLock feature,…

Reading a SiteLock scan report and assigning the next action A SiteLock report is useful when each finding becomes a specific action with an owner and a verification step. Read the scan type, scope and completion…

Reading Cloudflare security events for an incident Security Events explains actions taken by Cloudflare security products. Use it to investigate a specific incident, remembering that events and HTTP…

Recovering the Nord Account used by your VPN subscription Recover the Nord Account associated with your activated VPN subscription before creating a replacement account. Your Nabtech client-area login and your…

Recovering Zoho account access after losing an MFA device If you lose the phone or authentication method used for Zoho, first try the recovery methods configured for that account. Password recovery and…

Redirecting HTTP to HTTPS safely with an Apache .htaccess rule Use an HTTPS redirect after the website has a valid certificate and works correctly over HTTPS. On an Apache-compatible hosting service, an .htaccess…

Releasing a legitimate SpamExperts quarantined message Release a quarantined SpamExperts message only after confirming that it is expected and safe for the intended recipient. Releasing one message and…

Removing a WordPress user and reassigning their content When a person no longer needs WordPress access, remove or restrict the account while preserving content that belongs to the website. Review the deletion…

Removing an obsolete SiteLock integration carefully Remove an obsolete SiteLock integration in the right order. A website that still routes through a cancelled security service can stop working, even when…

Renewing and replacing SSL certificates under current validity limits Renewal requires a valid certificate to be issued and installed before the current one expires. Paying an invoice alone does not prove that the…

Replacing a certificate when the private key is lost or exposed A certificate cannot be installed with an unrelated private key. If the matching key is genuinely unavailable, create a new key and request a…

Replacing a shared mailbox password with controlled team access Replace a shared mailbox password with named, controlled access where the product supports it. The change should preserve the team's ability to work…

Replacing an expiring Windows Server certificate without breaking bindings Installing a renewed certificate in Windows does not always switch the services that use it. A website can continue presenting an older certificate…

Replacing or removing cPanel two-factor authentication When changing phones, reconfigure cPanel 2FA so the new authenticator can generate valid codes. Removing 2FA entirely returns that panel login to…

Reporting a legitimate message incorrectly filtered as spam A false positive is legitimate mail classified as unwanted. Correct the particular message and investigate its cause before weakening filtering for a…

Reporting unwanted mail that passed SpamExperts filtering A false negative is unwanted mail that passed filtering. Report representative originals and inspect the delivery path so the correction targets the…

Requesting a review of a suspected SiteLock false positive A suspected false positive needs evidence and review. Keep the warning visible while you establish what the file does and whether it matches a trusted…

Requesting and renewing a certificate in Virtualmin Request a trusted HTTPS certificate for a Virtualmin domain after its public names reach the intended service. Configure automatic renewal and monitor…

Requesting certificate revocation after a key compromise Report a compromised certificate private key promptly and arrange revocation through the issuer or the authorised Nabtech certificate order. Revocation…

Responding to a SiteLock alert or a hacked website Treat a malware alert as a problem to investigate, contain and verify. Removing a suspicious file is only one part of recovery. You also need to…

Responding to unusual outgoing traffic or a suspended sender If SpamExperts detects abusive outgoing mail, contain the affected sender before restoring delivery. Unlocking an account while the compromised…

Restricting a private directory to trusted IP addresses An allowlist limits a directory to trusted source IP addresses. It can add a useful layer around a private maintenance area, but it needs stable…

Restricting access to an organisation's email archive Restrict archive search and export to people with an approved business reason. A domain-wide archive can expose historical messages belonging to many…

Restricting Ubuntu firewall access without locking out SSH Use UFW to permit required services and restrict administrative access on a self-managed Ubuntu server. Build the allow rules for your current…

Retrying AutoSSL after fixing a certificate-validation problem An AutoSSL retry is useful after correcting the reason a hostname could not be validated. Repeatedly clicking a run control without fixing DNS or…

Review customer DNSSEC and reverse DNS requests Customer requests let your company review selected DNS actions before they are performed. This is especially useful for DNSSEC and reverse DNS, where an…

Reviewing a suspected phishing message before release Treat an email requesting a password, payment change, unusual download or urgent secrecy as a request that needs verification. Filtering reduces…

Reviewing firewall access for Webmin and hosted services Permit the Webmin administration listener and hosted services through the firewall only where they are required. The operating-system firewall, provider…

Reviewing WooCommerce customer account security Review customer account security so buyers can access their own orders and downloads without exposing another customer's information. Check the account…

Reviewing WordPress administrator accounts Review administrator access regularly so every powerful account has a known owner and a current reason to exist. An unfamiliar administrator deserves…

Reviewing WordPress security findings and protection tools Our NabWP Security area helps you understand the security condition of the selected WordPress website and act on findings that the enabled tools can…

Roll out two-factor authentication for WHMCS users and staff Enable two-factor authentication in WHMCS with a tested enrolment and recovery process. This reduces reliance on a password while preserving a…

Rotating an outgoing filtering credential safely SpamExperts outgoing filtering requires an authorised relay route and authentication method. These credentials can be different from an employee's…

Searching an enabled SpamExperts email archive Search SpamExperts archiving when you need a retained message that the purchased archive service actually captured. Ordinary filtering logs and…

Securing a WordPress website with practical maintenance and access controls A secure WordPress website needs maintained software, controlled access, reliable recovery and regular checks. Apply these controls to the specific…

Send our support team useful screenshots and logs without exposing secrets A focused screenshot or log excerpt helps us understand your problem faster. It should show the error and relevant context while keeping passwords,…

Setting FastAPI CORS for a separate website origin A browser treats scheme, hostname and port as part of an origin. A frontend on one origin may need explicit CORS permission to call a FastAPI backend on…

Setting up an actionable certificate-expiry check An actionable certificate check combines the public expiry information with a named renewal owner and a recovery plan. Monitor the certificate customers…

Setting up incoming email filtering without interrupting mail Incoming email filtering checks messages before they reach your mailbox server. Our email-services catalogue includes SpamExperts filtering. This…

Signing a DirectAdmin DNS zone with DNSSEC DNSSEC signs a DirectAdmin-managed zone so validating resolvers can verify its answers. The parent-zone DS record must correspond to the active signing…

Tracing a SpamExperts message by sender, recipient and time Trace one message through SpamExperts before changing filters. The aim is to identify whether the service saw it, how it classified it and what happened…

Troubleshooting browser CORS errors for an API CORS is a browser-enforced rule for reading responses across origins. It is separate from DNS, TLS and the API’s authentication and authorization…

Troubleshooting NordVPN connections and website access When a website stops working while NordVPN is connected, determine whether the problem is the internet connection, the VPN connection or that particular…

Turning WHM Security Advisor findings into an action plan Security Advisor checks server configuration and reports findings with suggested actions. Treat it as an evidence-based maintenance input, then assess…

Understand HTTPS and SVCB records before adding them to a hosting zone HTTPS and SVCB records can advertise service endpoints and connection parameters to compatible clients. They add information beyond ordinary address…

Understanding a certificate issuance failure caused by CAA A CAA failure can mean that your DNS policy does not authorise the requested certificate authority, or that the authority cannot reliably read the…

Understanding and testing NordVPN Kill Switch behaviour Kill Switch controls what happens when traffic cannot use the VPN connection. Its behaviour differs between NordVPN applications, so choose the…

Use CAA records to authorise the certificate authorities your services need CAA records let a domain operator express which certificate authorities may issue certificates for its names. An incomplete policy can block a…

Using Cloudflare Under Attack mode during a web attack Under Attack mode adds a browser challenge before eligible requests reach the site. It can help during an active web attack, but it can also interrupt…

Using Cloudflare’s current security controls instead of old security levels Older Cloudflare guides refer to selectable Low, Medium or High security levels. Current security behaviour uses an Always protected model, while Under…

Using NordVPN split tunnelling where your platform supports it Use split tunnelling when an approved application needs a different network path from the rest of the device. An excluded application's traffic bypasses…

Using SiteWorx advanced .htaccess controls carefully The SiteWorx Htaccess interface controls directory-level web settings such as redirects, access rules and content handling. A rule at the domain root…

Using the available cPanel Virus Scanner and reviewing its limits The optional Virus Scanner checks selected account data using the server’s available scanning engine. It can identify known threats, but a clean result…

Using two-factor authentication with a recovery plan Two-factor authentication adds a second verification step to WordPress login. Set up a recovery method at the same time so losing a phone does not leave…

Verifying a website after SiteLock cleanup or manual repair Close a cleanup incident only after both the security findings and the affected business functions have been checked. A fresh scan is one part of that…