Enterprise security, built in.
Breaches and malware are a constant on today's web. Our UK platform keeps your site safe with enterprise-grade protection at every layer — and because we don't believe security should be an upsell, all of it is included on every InstaHost plan.
Attacks stopped before they reach your site.
Threats are filtered at the network edge and on the platform, so malicious traffic never gets near your files.
Daily malware scanning
Every site is scanned for common malware each day, with clear reports and on-demand scans whenever you want one.
Web Application Firewall
Blocks SQL injection, XSS, trojans and path-traversal attacks at the edge, before they touch your application.
1 Tbps+ anti-DDoS
Enterprise-grade denial-of-service protection filters out malicious floods and lets your genuine visitors through.
StackProtect brute-force
Login attempts are monitored and rate-limited with reCAPTCHA, blocking up to six million malicious requests a day.
IP & country blocking
Block individual malicious addresses or restrict whole regions from reaching your site, straight from the panel.
File permissions checker
Scans for risky file permissions and fixes them automatically, closing a common route in for attackers.
Everything encrypted, every login verified.
Strong encryption end to end, and account protection that keeps intruders out even if a password leaks.
Free wildcard SSL
Automatic Let's Encrypt certificates secure your whole domain and its subdomains, renewed for you before they expire.
Two-factor authentication
Protect your control panel with a TOTP authenticator app, so a stolen password alone can't get anyone in.
TLS-secured file transfers
FTP and SFTP are encrypted with TLS, disabled by default, and can auto-lock after a set period of inactivity.
Password tools
A built-in secure password generator, plus a website password manager to lock down areas of your site without any code.
CDN security headers
Manage HTTP security header policies from the dashboard, hardening how browsers treat your site.
Network reputation blocking
Traffic from known-bad IP addresses is automatically identified and routed away from your site.
Spam and viruses filtered before they land.
Anti-spam & anti-virus
Three layers of scanning — network denial lists, virus signatures and content filtering — screen every incoming message.
Configurable filters
Manage your own allow-lists and deny-lists from webmail, tuning exactly what reaches your inbox.
Outgoing monitoring
A zero-tolerance outbound spam policy stops a compromised account from wrecking your domain's sending reputation.
Built so one failure can't take you down.
Roles are isolated, resources scale under pressure, and your data is backed up under the 3-2-1 rule.
Isolated server roles
Web, database and mail run on separate servers, so a breach in one can't move laterally into the others.
Autoscaling infrastructure
Resources scale automatically under load, so an attack or a traffic spike doesn't slow your site to a crawl.
No single point of failure
Redundancy at every level with automatic failover keeps your site online when hardware doesn't cooperate.
Isolated 3-2-1 backups
Separate web, database, FTP and mail backups are held offsite, following the 3-2-1 rule for real resilience.
Automated & manual backups
Schedule automatic protection or take a backup yourself in a couple of clicks, any time.
Physical data-centre security
UK data centres with 24/7 security, photo-ID entry, CCTV, gated access and redundant power.
Independently certified.
The platform behind InstaHost is audited and accredited to recognised security standards.
All of this. Included, never an upsell.
Every protection on this page comes as standard on every InstaHost plan — no security add-ons, no surprise line items.