Security

Security

30 Articles

Allowing or blocking an IP address through your server’s firewall on ULTRA Cloud

Scout lets you allow an individual IP address through your server’s firewall. An allowed IP can reach the server on all ports, which makes this the quickest way to get at services that aren’t open to the public – SFTP/SSH or remote MySQL, for example. This setting applies to the…

Security answer not accepted when resetting your password

If your security answer is rejected, check the capitalisation first. If you still can’t get in, we can reset it once we’ve verified your identity.

Allowing a scanner or tester’s IP addresses

Our security systems block traffic that looks like an attack, and a vulnerability scan or penetration test looks like one. If your scanning or testing company needs to reach your site or server without being blocked, we can allow their IP addresses through. There’s no charge. What an allowlist entry…

Penetration testing and vulnerability scanning

You’re welcome to have your website or server penetration tested or scanned for vulnerabilities. What we need from you depends on the type of hosting you have. Shared hosting Your site shares a server with other customers, so testing has a few extra rules. Tell us at least one working…

Important PHP Security Advisory (October 2026)

What Website Owners Need to Know Last updated: 22 October 2026Please keep an eye on our status page for regular updates. On 21 October 2026, the PHP development team released emergency security updates addressing two critical vulnerabilities: CVE-2026-109618 CVE-2026-109619 Both vulnerabilities were rated 9.2 out of 10 in severity and…

How to Disable Directory Indexing and Prevent File Browsing

When a website folder lacks an index file (such as index.php or index.html), web servers often display a full list of all files in that directory. Known as directory indexing or directory browsing, this allows visitors to browse raw uploads, plugin files, or site assets, posing privacy and security risks.…

Using ULTRA Cloud‘s application firewall (WAF)

The Application Firewall adds an extra layer of protection to your website by checking incoming requests for patterns commonly associated with attacks. You choose which rules should block matching requests, so you stay in control of what gets filtered. Think of it as another layer of defence alongside keeping your…

Managing SFTP Access: Requesting Password Resets and User Changes

SFTP (Secure File Transfer Protocol) allows you and your developers to securely upload and edit files on your server. Because SFTP operates directly at the server level, managing users and passwords works a little differently than standard cPanel or website logins. This guide explains how SFTP user management works, why…

How to Reset a Lost cPanel Password

If you’ve lost or forgotten your cPanel password, don’t worry — you can reset it quickly without contacting support in most cases. Option 1 — Reset via the Login Page Go to your cPanel login page (e.g. yourdomain.com:2083 or cpanel.yourdomain.com) Click Reset Password Enter your cPanel username or the email…

How to Enable Two-Factor Authentication (2FA) on Your Account

Two-factor authentication (2FA) adds a second layer of protection to your account by requiring a time-based code from an authenticator app in addition to your password. This guide walks through enabling 2FA from your account portal. Step 1: Open Security Settings From your portal.freethought.uk account dashboard, open the account menu…