Features
Everything you need to secure any Linux server. One agent, one dashboard, zero configuration.
15+
OWASP Attack Types
100+
Bot Fingerprints
20
Software Products Tracked
<60s
Install to Protected
What the Free and Pro badges mean
Every Free server is held in monitor mode by the platform, which means Defensia writes no firewall rules on Free: no IP bans, no geoblocking, no threat-feed blocking, no bot blocking. Attacks are still detected, scored and reported to your dashboard. The Defensia web application firewall — the engine that reads your access logs — is Pro only; on Free the agent is told to disable it, so it produces no events.
One exception, and we would rather you heard it from us. If your server already runs Apache with ModSecurity in blocking mode, the agent installs its own ModSecurity rule set on every plan, Free included. Those rules carry an inline deny and return 403 at the web server, so such a server does block the thirteen attack patterns they cover. This is not something we can promise either way: it depends on software we do not install and do not control. On a server without Apache and ModSecurity, nothing in this paragraph applies.
Free also covers one server, 2,000 visible events a month and 7 days of history. A feature marked Free below works on Free with those limits; one marked Pro does not run at all without a subscription.
Web Application Firewall
15+ OWASP attack types blocked in real time from your web server logs.
SSH Brute Force Protection
Detection on every plan. 15 attack patterns; blocking requires Pro.
Mail, FTP & Database Protection
Brute force detection for Postfix, Dovecot, Pure-FTPD, and MySQL.
Geoblocking
Block entire countries from accessing your servers.
Intelligent Bans
Progressive escalation with cross-server visibility and permanent ban option.
Monitor Mode
Detect everything without banning. The Free plan always runs this way.
Bot Detection & Fingerprinting
100+ bot fingerprints. AI crawlers, SEO bots, scanners — all classified.
Threat Intelligence
Curated feeds from Spamhaus, Feodo Tracker. Auto-blocks known bad IPs.
Security Scanner
30+ hardening checks. SSH config, permissions, ports, processes.
Vulnerability Management
CVE matching against 20 software products. Priority scoring with EPSS.
Exploit Intelligence
Detects CVEs being actively exploited across the network using real server data.
Docker Monitoring
Auto-detects containers, web services, and Docker version.
Kubernetes Security
DaemonSet deployment. Ingress WAF. Pod event monitoring.
cPanel / WHM Integration
Native WHM sidebar addon. cPHulk + domlog auto-detection.
Lightweight Agent
Single binary. Under 1% CPU, under 30MB RAM. Auto-updates.
Dashboard
Command center with real-time status, charts, and global counters.
Alerts & Notifications
Multi-channel alerts: email, Slack, webhooks. Custom alert rules.
Teams & Organizations
Multi-user access with roles. Invite team members.
Data Export & Search
Export events, bans, audit logs. Global search across all servers.
Software Audit
Full package inventory. CVE matching. Update recommendations.
Complete Feature List
Ready to get started?
Install the Defensia agent on your first server in under 60 seconds. Free forever for 1 server.