Imunify360 is server security software that combines a firewall, malware scanning and cleanup in one package.
Imunify360 is a security suite for web servers, made by CloudLinux. Hosting providers install it on their servers to protect every account at once. Instead of each website owner installing separate plugins for a firewall and malware scanning, Imunify360 does the job at server level, before attacks reach your site and without using your account's resources.
For example, if a bot tries to upload a malicious PHP file through an old contact form plugin, Imunify360 can block the request, or spot the file once it lands and quarantine or clean it.
What Imunify360 includes
- Firewall: blocks known bad IP addresses and limits brute force login attempts.
- Web application firewall (WAF): inspects web requests for common attacks, such as SQL injection and attempts to exploit vulnerable plugins.
- Malware scanner: checks files as they're uploaded or changed, and runs regular scans of the whole account.
- Automatic cleanup: removes injected code from infected files where it can, or quarantines them.
- Proactive defence: watches PHP scripts as they run and can stop known malicious behaviour.
- Reputation monitoring: checks whether your domains or IPs appear on blocklists.
How Imunify360 works
Imunify360 combines local rules with a shared threat database. When one server sees a new attack pattern or malicious IP, that information is used to protect others. Suspicious visitors may be shown a challenge page instead of being blocked outright, so real people can still get through if they're caught by mistake.
Because it runs on the server, it can see and stop attacks across every account and website on the machine, which a WordPress plugin can't.
Imunify360 vs security plugins
Security plugins run inside your website, so they only start working after PHP has loaded. That uses your account's resources and means some attacks get in before the plugin sees them. Imunify360 works lower down, at the server. Many site owners still use a plugin for features like two-factor authentication or login alerts, and the two can work side by side.
Common Imunify360 issues
- Blocked IP: too many failed logins can block your own address. Your host can whitelist it.
- False positives: occasionally a legitimate file or request is flagged. Report it rather than disabling protection.
- Not a replacement for updates: it reduces risk but doesn't fix outdated plugins or weak passwords. Keep backups too.
Every AblePage plan includes Imunify360 malware scanning and firewall protection.