Imunify360 License: WAF, Malware Scanning and Proactive Defense
A security suite that closes the attack surface of a shared hosting server from one interface. The license binds to your server IP and installs with a single command.
Imunify360 is a security suite for Linux hosting servers that folds several tools you would otherwise install and manage separately into one interface. A web application firewall filters incoming HTTP requests against a rule set and drops known attack patterns before they reach a site. The malware scanner checks account files both on a schedule and at the moment they are uploaded, quarantining anything infected. Proactive Defense watches PHP scripts as they execute and stops malicious behavior — file inclusion, injected code, attempts to run shell commands — even when the payload has never been seen before. Around that sit brute-force protection and a greylist that sends suspicious addresses to a challenge page instead of refusing them outright. The audience is specific: shared hosting operators and resellers whose entire server ends up on a blacklist because one customer left an old plugin unpatched.
Buy here and the license is registered against your server's IP; there is no key to keep somewhere safe or paste in during setup. Installation is one command, and the script resolves entitlement from the IP it is called from. The cost leaves your prepaid balance immediately, nothing queues for approval, and protection is normally up within a minute. Migrations are the common case: when you move to a new machine you change the IP yourself in the panel, the old address stops at once, and you rerun the installer on the new box — so there is no window in which the server sits unprotected while a ticket waits for an answer. Monthly terms run to the end of the period and auto-renewal can be switched off in the panel; there is no contract and no early-exit fee. Every one of those operations — issue, renew, suspend, move the IP — is also in the REST API, which is open on every account tier, so you can wire it into WHMCS and have a customer order provision itself. Each order, renewal and API call is written to your account with its result. Reseller accounts get their discount applied automatically at order time, serve the installer from their own domain under their own brand, and can create sub-resellers with separate price lists and balance limits.
Three things to get right about scope. Editions: the free ImunifyAV scans and reports, and stops there; cleanup, the firewall, Proactive Defense and the IP-side blocking come with the paid edition. Tiers: the product is sold by the number of hosting accounts on the server, with an unlimited option as well, so count the accounts on that machine before choosing — the catalogue states how many accounts each tier covers and what it currently costs. Imunify Email: mail filtering is a separate product with its own license and is not included here. After installation, budget time for two settings. Run Proactive Defense in log-only mode for a while to find out which customer sites trigger false positives before you switch it to blocking, and tune the scan schedule on busy machines, because real-time scanning does add disk load.
Why buy it here
WAF and greylisting
Requests are filtered against a rule set and suspicious addresses get a challenge rather than a hard block.
Real-time scanning
Files are scanned as they are uploaded and infected content goes straight to quarantine.
Proactive Defense
PHP is watched at runtime, so malicious behavior is stopped even without a known signature.
IP-bound license
Tied to the server IP and re-pointed by you in the panel whenever the server moves; the old address stops instantly.
Frequently asked
Which tier do I need?
Tiers are defined by the number of hosting accounts on the server, and there is an unlimited option. Count the accounts on that box and take the tier that covers them; the catalogue lists the account ceiling for each tier and its current price. On a monthly term nothing is locked in, so if the box grows you can move up a tier at the end of the period.
ImunifyAV is free — why pay for the full edition?
ImunifyAV finds malware and reports it, and that is where it ends. Cleanup, the web application firewall, runtime PHP monitoring, brute-force protection and the blocking of suspicious addresses all belong to the paid edition. If you only need to know whether a server is infected, AV does the job; if you host other people's sites on it, you need the part that also stops things from happening.
Is Imunify Email included?
No. Imunify Email is a separate product with its own license and is not covered here. You can run both on the same server; they are listed separately in the panel and renew separately.
I don't use cPanel. Does it still work?
It also runs on DirectAdmin and Plesk, and in standalone mode on Linux servers with no control panel at all. Standalone gives you server-wide protection rather than the per-account views. Licensing is tied to the IP rather than to a panel, so which control panel you run makes no difference to ordering or activation.
Other licences
Pick the tier that matches your account count, point it at your server IP and have protection running today.