Overview
Keeping one server secure is tough enough, but what if you have several to
maintain? By collecting the log and alert data in real time from remote
ModSecurity sensors, ModSecurity provides a single place where you need
to look to verify your web applications are secure.
Even if do you have only one web server to monitor, you would be better
off using a tool that has a comfortable user interface, saves you time
by automating the repetitive tasks, and generally makes your life
easier by allowing you to focus on the things that really matter.
Features
The following features are included:
- Self-contained application that comes with an embedded web server and an embedded database.
- Collects logs and alerts from any number of remote sensors in real time (reliably,
securely, buffered, with support for disconnected operation).
- Built on top of a reliable high-performance framework designed to handle a large
number of network events.
- User interface provides support for sensor, alert, and transaction management.
- Runs on any platform that supports JDK/JRE 1.4 or better.
- Installs in under five minutes. (Installation on Windows and Linux is fully automated.)
- Automated maintenance options keep the database at a manageable size.
- Sensor activity history.
- Alerting facilities.
- Reporting facilities. Nice and shiny reports in PDF format can be scheduled
or produced on-demand. Automatic distribution via email.
- Automatic DNS and Geo IP resolution.
|
Screenshots
Below are the screenshots of the recently published early preview version of ModSecurity Console:

|
|
Main window; Contains the overview of the sensor state, the graphs for the overall activity and the list of recently visited transactions.
|

|
|
Search form; Provides search facilities to search the transaction and alert database.
|

|
|
Transaction/Alert view; Provides full information about a single transaction/alert.
|
|
|
Note
A trial version of ModSecurity Console (most recent release is 1.0.0-rc-7, which expires in September) is available for immediate download from
Thinking Stone Network.
|