How to ensure website security with Imunify360 on Namecheap Business Shared Hosting

Imunify360 is a powerful security tool available on our Namecheap Business Shared Hosting servers. It helps keep your website safe by scanning for malware, blocking malicious activity, and offering real-time protection.

This guide will walk you through what Imunify360 does, where to find it, and how to use it to secure your site.

• What is Imunify360?
• How to run a Malware Scan
• How to view Scan Results
• How to use Ignore List
• What is Proactive Defense?

What is Imunify360?

Imunify360 is an all-in-one security solution built for Linux web servers. It protects your hosting account by:

• Scanning files and databases for malware
• Blocking suspicious scripts with Proactive Defense
• Managing dangerous files in quarantine
• Automatically cleaning infected code (without affecting safe content)

You can find it in your cPanel >> Security section >> Imunify360:

How to run a Malware Scan

1. Go to the Imunify360 tool in cPanel >> Malicious tab.

2. You can run a scan manually using the Start scanning button:



During the scan, Imunify360 automatically cleans up and removes malicious code from the infected files (all other file content remains untouched) or deletes those infected files from your hosting account.

3. When treats are found (for some reason, malware hasn't been removed from the file, or the infected file hasn't been deleted from the hosting account during the scan), the following options are visible in the Actions column of the Imunify360 interface:

• Clean up
• Restore
• View file content to inspect it yourself.
• Add to Ignore List - add file to the Ignore List and remove it from the Malicious files list.

Note 1: It's technically impossible to use the “Clean up” or "Clean up all" button (located at the top right corner of the table on the main Imunify360 dashboard) to remove malicious files or code inside them.

Instead, please use the "File Manager" menu of your cPanel account and complete the malware cleanup process manually by removing the files from there.

Note 2: It’s also impossible to restore a clean file version from backup (if available) from the Imunify360 interface with the help of the "Restore" option. You can manually restore clean files using the AutoBackup tool in cPanel.

Tip: Imunify360 also runs scheduled automatic scans each week - no need to scan manually unless you want to double-check.

How to view Scan Results

The Scan tab shows the information about all the scans performed in your cPanel account, including the scan date, folder path, the total number of scanned files, a number of threats, a number of files detected as suspicious during scanning, and actions taken for these files:



History tab: Shows every action taken - including scans, cleanups, file restores, and Ignore List updates. This helps you track what's happened over time. Logs are stored on the server for 30 days.

How to use Ignore List

Ignore List contains the list of files, databases, and directories that are excluded from Malware Scanner scanning.

You can exclude a file or folder from future scans:

• Go to Malware Scanner >> Ignore List
• Click Add new entry and enter the full path:
  
  
  
  

Imunify360 will skip these during future scans. You can remove items from the list anytime.

Note: Wildcards like /home/*/file.php are not supported.

What is Proactive Defense?

This feature blocks suspicious scripts before they can do any harm. It doesn't rely on known malware - instead, it watches for dangerous behavior (like trying to inject code or modify system files).

You can see blocked actions under the Proactive Defense tab:



Proactive Defense operates in Kill Mode on Namecheap Business servers. This is the highest level of protection - the script is terminated as soon as malicious activity is detected.

If you're sure a file is safe and want to allow it:

• Click the gear icon next to the event.
• Choose to Ignore detected rule or Ignore all rules for the file.

Note: Use the ignore options if you are absolutely certain that the action is safe.



That's it!