Request and view a hosting security review

Open the service in Hosting and go to Reviews. On a multi-account hosting plan, open the account of the customer you want to review.

A review includes:

• a full on-demand scan;
• detections, quarantine and clean-up;
• outdated applications and PHP versions;
• users, administrators and recent access;
• the reputation of the account's domains.

Request one

Click Pedir revisión (Request review) and explain what you have noticed. Add the approximate date, the affected URL and any recent changes if you know them. This information helps separate a new incident from an old finding.

The screen shows the delivery commitment. You do not also need to open a ticket to follow the work: when the report is ready you will get an email notification and it will appear in the history.

Read the report

Start with the verdict and the scope. Then review the findings and separate:

• what Hostsuar has already fixed;
• what requires a decision or change on your part;
• what has only been observed and does not prove an intrusion.

Nothing that changes your account is taken as done beyond what the report itself states.

When not to wait for a review

A review is not the channel for an emergency. If the website is down, unauthorised messages are being sent or someone still has access right now, open a ticket from the button on the same screen and say that the incident is still ongoing.

Prepare useful information for the review

Describe what you have observed, not an assumed cause: an unexpected redirect, a new user, a changed file or an email you do not recognise. Include roughly when it started and whether it is still happening. Do not attach passwords, tokens or full copies of customer data unless they have been requested through a suitable channel.

After the report, check the changes that are yours to make and record which are still pending. A review reflects the scope and the moment analysed; it does not guarantee that there has never been an intrusion, or that an application will stay secure if it later changes or is left without updates.