Certainly, multiple aspects of hosting security are available because hacking is not only possible, but very likely. While most of our sites have never been hacked, it has happened before, so that gives us a genuine appreciation of the strong need for multiple layers of security. We are planning to upgrade to ensure high performance and scalability.
In addition to the hosting method, the web server and website design methods provide added security: On a basic level, chmod limits are set for read/write/execute access for owner, group, and public categories. SSL certificates can, of course, be set up to create secure connections, a feature which is especially significant for e-commerce sites that do not use Paypal in their transactions, since clients' financial information would be submitted directly via the website in question. Mod_security rules are put in place to enable filtering and post-scanning functionality, but these rules can also be customized in a dynamic way to enable or disable mod_security, per request. The virtual hosting solution is fully managed by system administrators and a support team, so should any problem extend beyond Tier 1 support’s scope of knowledge, it can also be referred to my escalated support group to ensure the highest level of support, as well as the most optimized and specific customized security measures.
Finally, a further layer of security is available at the website design level, so in our case, this usually means security for Joomla!. We disable the initial administrative user after installation to prevent hacking attempts via the default username of "admin" or the default database table ID of 42. This system also allows us to monitor suspicious activity and block specific IP addresses. These security features and others are easily managed with the help of add-ons specifically designed to heighten security, some of which are free, though the most comprehensive ones come at a reasonable cost.
