📄️Firewall
OpenPanel supports Sentinel Firewall - a fork of the ConfigServer Security and Firewall (CSF).
📄️Web Firewall (Coraza)
The Security > Web Firewall (Coraza) page manages CorazaWAF, the Web Application Firewall built into OpenPanel. It inspects every request to your users' websites and blocks common attacks such as SQL injection, cross-site scripting (XSS) and access to restricted files, using the OWASP Core Rule Set (CRS).
📄️ImunifyAV
ImunifyAV enhances your server’s security by allowing you to scan user website files for malicious content.
📄️Basic Auth
Enable Basic Access Authentication as an additional security layer for the OpenAdmin interface.
📄️Two-Factor Authentication
Two-Factor Authentication (2FA) adds a second login step for your own OpenAdmin account — a time-based one-time password (TOTP) from an authenticator app, in addition to your password.
📄️Passkeys
Passkeys let you sign in to your own OpenAdmin account using your device's built-in authentication (fingerprint, face recognition, security key, or PIN) instead of, or in addition to, a password.
📄️Blocked User Agents
Block requests to the OpenPanel user panel whose HTTP User-Agent header matches an entry on a blacklist, useful for keeping vulnerability scanners and known bad bots away from the login page.
📄️Disable OpenAdmin
As an advanced security measure, OpenPanel allows you to completely disable the OpenAdmin interface and its related admin service.