Introduction
Imunify360 is an advanced, all-in-one security suite integrated with cPanel, designed to protect Linux-based web servers from a wide range of threats. It uses artificial intelligence and real-time monitoring to detect and prevent malware, brute-force attacks, malicious scripts, outdated software exploits, and more. If your hosting provider includes Imunify360, it’s one of the most powerful tools available to keep your website secure.
In this article, you'll learn what Imunify360 does, how to access it in cPanel, and how to use its key features.
Key Features of Imunify360
-
Malware Detection & Cleanup – Scans and removes malicious files
-
Web Application Firewall (WAF) – Blocks common threats like SQL injections, XSS, and bots
-
Proactive Defense – Stops malicious code in real-time before it executes
-
Brute-force Protection – Blocks login abuse for cPanel, SSH, FTP, and email
-
Intrusion Detection & Prevention – Monitors server activity and blocks suspicious behavior
-
Reputation Management – Alerts you if your domain is blacklisted
-
Patch Management – Automatically patches vulnerabilities in CMSs like WordPress, Joomla, and more
How to Access Imunify360 in cPanel
-
Log in to your cPanel account
-
Scroll to the Security section
-
Click on Imunify360 (may be listed as ImunifyAV+ or similar depending on your plan)
Note: The interface and available features may vary depending on your hosting plan and provider.
How to Use Imunify360
1. Malware Scanner
Once inside Imunify360:
-
Go to the Malware Scanner tab
-
Click Start Scan or Rescan to scan your home directory
-
Detected threats will be listed along with suggested actions (e.g., clean, quarantine, or ignore)
Automatic scanning may already be scheduled by your host.
2. Proactive Defense
This feature monitors PHP scripts as they execute, blocking malicious actions before they affect your site.
-
Found under the Proactive Defense tab
-
Status should be enabled for maximum protection
-
View blocked scripts and decide whether to allow or review them
3. Firewall (WAF)
The built-in firewall automatically blocks known attack patterns:
-
View blocked IPs under the Firewall tab
-
Unblock IPs if you recognize them as safe
-
Monitor suspicious activity across FTP, email, SSH, and HTTP
4. Reputation Management
-
Found in the Reputation tab
-
Alerts you if your site is blacklisted by services like Google Safe Browsing
-
Provides steps to delist or clean up infected pages
5. History & Logs
-
View all actions Imunify360 has taken on your account
-
Includes cleaned files, detected malware, and login attempts
-
Useful for auditing and troubleshooting
What Happens When a Threat is Detected?
Depending on the severity and configuration:
-
Files may be automatically quarantined
-
Suspicious code is neutralized or blocked
-
Admins may receive an alert for manual review
-
Infected CMS plugins/themes may be flagged
You can review and restore cleaned or quarantined files manually if needed.
Best Practices with Imunify360
Tip | Why |
---|---|
Keep Proactive Defense enabled | Prevents infections before they happen |
Regularly scan for malware | Catch hidden or new threats |
Check the firewall logs | Identify suspicious IPs or login attempts |
Use updated CMS/themes/plugins | Imunify360 helps patch them, but updates are still essential |
Respond to reputation alerts | Fix issues quickly to protect SEO and brand trust |
Troubleshooting
Issue | Solution |
---|---|
Legitimate files marked as threats | Mark them as false positives in the interface |
Locked out IP | Contact hosting support to unblock or whitelist your IP |
Website still compromised | Review Proactive Defense logs or restore from a clean backup |
Conclusion
Imunify360 is a comprehensive security platform that protects your website from modern threats automatically. With malware scanning, firewall protection, real-time monitoring, and reputation management, it provides everything you need to safeguard your hosting environment. If your hosting includes Imunify360, make the most of it — check your scans, review alerts, and rest easy knowing your site has intelligent protection in place.