← Blog · 07 Sep 2026

CWP Security Checklist: 10 Steps After Install

1. Change the panel and SSH ports access. Allow the CWP port (2030/2031 or 2304 on some builds) only from your IP when possible.
2. Use SSH keys and disable root password login.
3. Enable CSF firewall and LFD for brute-force blocking.
4. Turn on ModSecurity with a maintained rule set.
5. Keep PHP current. Disable PHP versions you do not use.
6. Set AutoSSL for all domains and force HTTPS.
7. Disable unused services (FTP if you use SFTP only).
8. Schedule backups to another server and test a restore.
9. Update CWP and the OS regularly.
10. Watch logs and alerts: failed logins, disk space, load.

Security is a habit, not a one-time job. JryHost managed plans do these steps for you.