Imunify360 is the security suite that protects MdmHost servers. It combines a malware scanner, automatic cleanup, a firewall, a web application firewall (WAF) and bot protection in one product. Most of it works silently in the background; this guide explains each part and what you can do from cPanel.
Before you start
Imunify360 is active on every MdmHost cPanel server; nothing needs installing. To view results for your account, log in to cPanel (see logging in to cPanel from the dashboard).
The parts of Imunify360
| Component | What it does |
|---|---|
| Malware Scanner | Scans files in real time as they are uploaded or changed, plus scheduled full scans. |
| Malware cleanup | Removes malicious code from infected files or quarantines them, keeping a backup. |
| Proactive Defense | Watches PHP scripts as they run and blocks dangerous behaviour, even from unknown malware. |
| Firewall | Blocks IPs with bad reputation and brute-force attacks on cPanel, FTP, SSH and email. |
| WAF (ModSecurity rules) | Blocks attacks such as SQL injection and exploit attempts against web apps. |
| WebShield | Shows a CAPTCHA or challenge to suspicious visitors instead of blocking them outright. |
| Reputation management | Checks whether your domains or IPs appear on blacklists. |
Open Imunify360 in cPanel
- Log in to cPanel.
- Go to cPanel → Security → Imunify360.
- The dashboard shows malicious files found in your account and their status (cleaned, quarantined, infected).
Note: The tabs you see in Imunify360 depend on the server's settings and your package. If a tab in this guide is missing, that action is handled by MdmHost support.
What you can do yourself
- See which files were found infected and when (see scanning your website).
- Clean or restore files (see cleaning infected files).
- Add false positives to the ignore list (see handling false positives).
- Check Proactive Defense events (see Proactive Defense).
What MdmHost manages
- Firewall rules, blacklists and whitelists for the server.
- WAF rule sets and global settings.
- Unblocking IPs that were blocked by mistake (see unblocking a blocked IP).
How it fits with other protection
Imunify360 works together with CloudLinux CageFS, which keeps each account isolated (see CageFS explained), and daily JetBackup backups. Security is still shared: keep WordPress, plugins and themes updated and use strong passwords (see WordPress security hardening).
Frequently asked questions
Do I need a separate security plugin in WordPress?
Imunify360 covers server-side scanning and firewalling. A light plugin for login protection and two-factor authentication is still useful; avoid heavy scanners that duplicate the work and use resources.
Does Imunify360 slow my site?
No noticeable effect for normal sites. Real-time scanning runs on file changes, not on every page view.
Will I be told when malware is found?
Results appear in cPanel → Imunify360. Depending on server settings, notifications are also emailed to the account contact address, so keep it up to date.
Is Imunify360 available on reseller plans?
Yes. It protects every account on MdmHost servers, including all accounts you create as a reseller or master reseller.