Malware scanners for cPanel - what options do I have right now?

[CrazySerb]

Other than Immunify and ClamAV, what other options are available for cPanel these days when it comes to malware scanning?

I can't install Immunify on AlmaLinux 9, as they aren't supporting that at all and have no plans to do so any time soon, so that one's out (and our new server hardware somehow doesn't support AlmaLinux 8, so that's out as well).

The only other option I see is ClamAV, but last few times I used that on our servers it not only used a ton of CPU (all the time!) but it was just impossible to configure in any reasonable way.

Are there any other options, either as cPanel plugins or even 3rd party services that scan the server remotely, via SSH access or something, that are ideally as easy to configure as Immunify360 is.

Thanks!

 

[quietFinn]

ConfigServer eXploit Scanner

ConfigServer eXploit Scanner (cxs) – ConfigServer Services

configserver.com

 

[techAMIGO]

Hello CrazySerb,

There are several options available for malware scanning on cPanel servers beyond Immunify and ClamAV. Here are a few alternatives you can explore:


Maldet (Linux Malware Detect): Maldet is a widely used open-source malware detection tool for Linux servers. It can scan files and directories for known malware signatures. It also provides options for email notifications and quarantine features. Maldet can work alongside ClamAV for enhanced security.

CXS (ConfigServer eXploit Scanner): CXS is a commercial product developed by ConfigServer Services. It goes beyond malware scanning and also checks for potential vulnerabilities and exploits in scripts and files. CXS offers real-time scanning and integrates with various cPanel and WHM features.

rkhunter (Rootkit Hunter): While not solely focused on malware, rkhunter is a popular tool to detect rootkits, backdoors, and other security vulnerabilities on Linux systems. It can complement other malware scanners by helping to identify potential compromised system files.

Sucuri Scanner: Sucuri offers a website security platform that includes a malware scanner. While it's not a traditional cPanel plugin, it can be used to scan websites hosted on cPanel servers. Sucuri's scanner can detect malware and security vulnerabilities.


Additionally, make sure to keep your software and security tools up to date for effective protection against emerging threats.

Additional Security Software | cPanel & WHM Documentation

This document lists third-party software and modifications that you can install to help secure your server.

docs.cpanel.net

 

[cPRex]

@techAMIGO - rkhunter is no longer recommended as it hasn't had an update since 2018: The Rootkit Hunter project

 

[ResellerWiz]

BitNinja is also another decent option.

 

[retechpro]

I’ve listen a lot about BitNinja. You can use it