Results 1 to 23 of 23
-
12-30-2012, 03:52 PM #1WHT Addict
- Join Date
- Sep 2009
- Posts
- 110
Cloudflare/Incapsula free plans security
Hi everyone,
i have searched a bit on forum, googled, and i see cloudflare and incapsula are mentioned on forum more than a few times.
Incapsula might be better for paid service, but what about free plans on cloudflare and incapsula, which one of those two has better security on free plan? I am using joomla 2.5.
Philip Tibom made a great and detailed report on these two with paid services, but that doesn't answer this dilema regarding free plans.
Thank you in advance
Dan
-
12-30-2012, 09:22 PM #2Web Hosting Master
- Join Date
- Feb 2010
- Posts
- 1,030
Almost of the host providers use cloudflare.
-
12-30-2012, 11:30 PM #3WHT Addict
- Join Date
- Sep 2009
- Posts
- 110
-
12-31-2012, 07:07 AM #4WHT Addict
- Join Date
- Sep 2012
- Posts
- 171
I need 5 posts to post links, but if you type incapsula vs. cloudflare in google you'll find an article at ehackingnews. On that page there's a link to a full pdf review.
In short: Incapsula is the clear winner. Cloudflare blocks pretty much no attacks, incapsula does.
-
12-31-2012, 02:05 PM #5WHT Addict
- Join Date
- Sep 2009
- Posts
- 110
You are referring to Philip Tibom's detailed PDF report, which i have already mentioned in the first post of this thread, as i said, i have already Google-ed and searched through WHT forum. Since i cant find anything significant related to these free services, this is why i would like to get some real experience feedback from users who are using these free plans.
-
01-02-2013, 04:00 PM #6Web Hosting Master
- Join Date
- Nov 2010
- Location
- San Francisco, CA
- Posts
- 901
-
01-02-2013, 04:19 PM #7WHT Addict
- Join Date
- Sep 2009
- Posts
- 110
-
01-02-2013, 04:22 PM #8Web Hosting Master
- Join Date
- Jan 2012
- Location
- Glasgow, Scotland
- Posts
- 607
██ HostUS - Premium Hosting Made Affordable
██ TEN Worldwide locations spanning USA, Europe & Asia Pacific
██ Own ASN, Own Network, Own IPs - AS7489 & AS25926
-
01-02-2013, 05:34 PM #9WHT Addict
- Join Date
- Sep 2009
- Posts
- 110
-
01-02-2013, 05:47 PM #10Web Hosting Master
- Join Date
- Jan 2012
- Location
- Glasgow, Scotland
- Posts
- 607
██ HostUS - Premium Hosting Made Affordable
██ TEN Worldwide locations spanning USA, Europe & Asia Pacific
██ Own ASN, Own Network, Own IPs - AS7489 & AS25926
-
01-06-2013, 03:59 AM #11WHT Addict
- Join Date
- May 2012
- Posts
- 116
Hi,
Well, I guess we are "to blame" here.
We only recently launched our Hosting Partners Program (combined with cPanel support) and while we are moving fast, CF had a pretty big head start advantage...
http://www.incapsula.com/the-incapsu...ller-affiliate
Since the October launch, we've already started working with several hosting partners. We are also talking with many more who are interested.
You see, Incapsula was initially devised as an enterprise-grade product, but times have moved on and we were happy to move on with them.
Thanks to the advances in distribution technology we can now provide an affordable large-scale solution.
This allowed us to develop partnership connection with shared hosting providers and create hosting integration features. (i.e. cPanel integration).
We are just getting started and we will welcome any new co-operation opportunities.█ Incapsula: Cloud CDN & Security | DDoS Mitigation
-----------------------------------------------------------------------
█ Instant DDoS Protection | Cloud-based PCI Compliant WAF | Dynamic content Caching | Global CDN | Anti-Spam
-
01-06-2013, 02:58 PM #12WHT Addict
- Join Date
- Sep 2009
- Posts
- 110
competition
This is what i was waiting for, cPanel integration will for sure provide added value to any hosting offering and ease usage for end users.
-
01-11-2013, 04:32 PM #13Web Hosting Master
- Join Date
- Feb 2012
- Location
- Memphis, TN
- Posts
- 3,285
We just rolled out the Incapsula plugin and currently playing around with it myself.
I have a few nitpicky things I need to talk to them about but if Igal says they just rolled the plugin out I am sure they are already working on it.
Currently, nothing other than functionality considered, CF still wins in terms of end user setup.█ hostingcove.com | Tennessee Based Hosting Provider.
█ cPanel Shared & Reseller Hosting - Domain Names
█ Join thousands of happy customers. Secure & Stable
█ HeroicVPS Premium KVM VPS. Ashburn / Phoenix
-
01-16-2013, 06:51 AM #14WHT Addict
- Join Date
- Mar 2010
- Posts
- 142
We are also partners with both companies incapsula now better then cloudflare.
Domain Good - Hosting websites since 2007!
Shared Hosting, Reseller Hosting and Dedicated Servers
cPanel | Softaculous | 99.9% Uptime | 24/7 Support | US & EU Server!
Follow us on Twitter @domaingood | Facebook @domaingood | Google+ @domaingood
-
01-16-2013, 09:33 AM #15Disabled
- Join Date
- Jan 2010
- Location
- Lithuania
- Posts
- 1,115
I go with CF due to unmetered bandwidth. Incapsula offers to little BW to start with and then charge for overage.
-
01-16-2013, 09:42 AM #16WHT Addict
- Join Date
- May 2012
- Posts
- 116
Hi,
I don't know if it too little or not, but our Free Plan offers 50 GB/month bandwidth.
Having said that, even with this limit in place, I have never heard about any of our free plan client charged for overages.
(For one thing, we don't ask for CC data on free plan signup so we can't really auto charge, even if we wanted to - and we don't)
We take the same lenient approach when dealing with our paid plan clients.
Yes, if you doubled your bandwidth capacity, someone will get in touch and try to work it out with you. But if you just overstepped it a bit, we won't even take notice.█ Incapsula: Cloud CDN & Security | DDoS Mitigation
-----------------------------------------------------------------------
█ Instant DDoS Protection | Cloud-based PCI Compliant WAF | Dynamic content Caching | Global CDN | Anti-Spam
-
01-16-2013, 09:44 AM #17Disabled
- Join Date
- Jan 2010
- Location
- Lithuania
- Posts
- 1,115
-
01-16-2013, 09:50 AM #18WHT Addict
- Join Date
- May 2012
- Posts
- 116
No problem.
I just assumed you were referring to our free plan because of the tread name: [Cloudflare/Incapsula free plan security]
As I've said, our bandwidth limitation can be best described as "virtual" and are mostly used for initial client classification.
We are not in 'charging for bandwidth' business, we deal in Cloud Security.█ Incapsula: Cloud CDN & Security | DDoS Mitigation
-----------------------------------------------------------------------
█ Instant DDoS Protection | Cloud-based PCI Compliant WAF | Dynamic content Caching | Global CDN | Anti-Spam
-
01-16-2013, 06:31 PM #19WHT Addict
- Join Date
- Sep 2009
- Posts
- 110
The reason i started this thread is clear from the Title itself.
My main concern is security for dynamic websites based on LAMP.....if you read WHT you can see threads about hacked websites, especially with MySQL injection.
Unfortunately i don't have enough knowledge to simulate mysql injection or similar hacking/spamming attempts, otherwise i would be more than happy to do a benchmark, and display clear comparison between incapsula and cf.
This is crucial for websites based on frameworks such as wordpress or joomla, less problems=more(satisfied) customers.
-
01-18-2013, 04:39 PM #20Web Hosting Master
- Join Date
- Nov 2001
- Location
- Ashburn, VA
- Posts
- 1,207
I actually just started researching this myself today. I've had a few sites with cloudflare for some time. While it's a great free service, it really doesn't do much on the security front. Sure they both do some basic blocking of bad bots and known bad IP's, but if you want any real WAF protection (such as sql injections, xss attacks, etc), you have to upgrade not just to a paid account, but even the 2nd tier paid accounts! CF offers some basic WAF functionality on their $20 plan, but really you'd want the rules support for it to be valuable. Think of the free accounts more as CDN's than security tools.
IMO unless you have the money to spend on it, you are better off setting up mod_security and the like on your own server. This is by no means a knock against either service. I actually really like cloudflare for what I use it for, and am still considering setting up incapsula for one or more sites. I just can't justify the cost for the higher tiers of either for personal sites.Affordable web hosting, design, & domain registration services since 2001
www.serve-you.net
-
01-18-2013, 05:28 PM #21WHT Addict
- Join Date
- Sep 2009
- Posts
- 110
@serve-you
Very interesting and useful info regarding CF, thanks.
It would be great if you could do incapsula on few sites, just to give it a go, to see how it performs on security, then feedback here....that would be awesome contribution to community
-
01-20-2013, 02:42 AM #22WHT Addict
- Join Date
- May 2012
- Posts
- 116
Hey,
You know, once a smart guy once told me: "All OS is free, but only if your time is worthless"
Mod_Security provide a good platform but you can't just use the default rule-set because, for one thing, it's openly available to every hacker on the planet.
Sure you can modify it, but if you use a common configuration you will still run into the same kind of problem.
Moreover, website security is a dynamic landscape and all WAFs need maintenance to keep working properly.
We have a security team working around the clock to keep up with new threats and implement new security rules. This requires research, large-scale monitoring, technical knowledge, different dedicated tool and keen understanding of threats and vulnerabilities.
Most website owners I know can't really keep up with that. After all, even if they can get over the initial learning curve, they still have a business to run.
And what about false positives? Who wants to start using his own site as a guinea pig for his latest, home-brewed security configuration? One wrong comma and your day is ruined (if you are lucky and can spot the issue in just one day)
Don't get me wrong, mod_security is GREAT (and not only because of it's price tag) but it only reaches it's full potential in the hands of a security expert.Last edited by Igal Zeifman; 01-20-2013 at 02:57 AM.
█ Incapsula: Cloud CDN & Security | DDoS Mitigation
-----------------------------------------------------------------------
█ Instant DDoS Protection | Cloud-based PCI Compliant WAF | Dynamic content Caching | Global CDN | Anti-Spam
-
02-11-2013, 01:56 PM #23Junior Guru Wannabe
- Join Date
- Feb 2012
- Posts
- 34
I've been using Incapsula on a few sites and have to say I'm impressed so far. The dashboard is well laid out, and you get a cdn and other security features for free. I don't yet feel the need to upgrade to the paid plan to get firewall protection.
Also recently found out about Distil and how it compares to Incapsula.
But Distil looks like it's more about preventing content scrapers vs. security lockdown with Incapsula. I wonder if anyone here has tried Distil and can compare the two services?
Similar Threads
-
New Year Discount | 20% OFF | CloudFlare/Incapsula | 2 FREE Months | Softaculous
By PlotHost-Max in forum Reseller Hosting OffersReplies: 0Last Post: 01-01-2013, 02:26 PM -
New Year Offer | 20% OFF | CloudFlare/Incapsula | 2 FREE Months | Softaculous
By PlotHost-Max in forum Shared Hosting OffersReplies: 0Last Post: 01-01-2013, 02:25 PM -
Santa Present | 20% OFF | w/ CloudFlare/Incapsula/Softaculous | 2 FREE Months
By PlotHost-Max in forum Reseller Hosting OffersReplies: 0Last Post: 12-25-2012, 02:22 PM -
Santa Gift | 20% OFF | w/ CloudFlare/Incapsula/Attracta/Softaculous | 2 FREE Month
By PlotHost-Max in forum Shared Hosting OffersReplies: 0Last Post: 12-25-2012, 02:20 PM -
Cloudflare vs Incapsula vs Torbit
By geekwithlens in forum Web HostingReplies: 58Last Post: 02-23-2012, 01:01 PM