Hosted.com adds Monarx and Imunify360 to web hosting security stack

Hosted.com has added two security engines, Monarx and Imunify360, across its Web Hosting and WordPress Hosting plans to speed detection and containment of zero-day threats. The move puts prevention, quarantine and recovery inside the hosting platform at no extra cost to customers.

Why it matters: - Hosted.com is trying to shrink the gap between a new website exploit and the moment a customer site gets hit. - The integration is aimed at small businesses that usually do not have dedicated security staff. - The move combines two detection models so one engine can catch threats that the other misses. - The protection is included across Web Hosting and WordPress Hosting plans at no additional cost.

What happened: - Hosted.com integrated Monarx and Imunify360 across its hosting platform. - The rollout covers Hosted.com Web Hosting and WordPress Hosting services. - The security engines run inside the hosting environment instead of as an add-on customers install themselves. - Detection, quarantine and response now run continuously at the server level for every account on the platform.

The details: - Monarx uses runtime application self-protection, or RASP, to watch what a script does while it is executing. - Monarx targets behavior linked to compromise, including web shells, phishing kits, adware injections and file uploaders. - Monarx offloads analysis to its cloud service to reduce processing burden on hosting servers. - Imunify360 uses layered controls that include a web application firewall, intrusion detection and prevention, malware scanning, and Proactive Defense. - Imunify360 scans traffic for SQL injection, cross-site scripting and illegal resource access. - Imunify360 monitors server logs for repeated failed logins and blocks offending addresses. - Imunify360 scans server files, WordPress databases and scheduled cron jobs in real time and on demand. - The Proactive Defense engine analyzes PHP behavior as it runs and can patch known vulnerabilities at that layer. - Imunify360 shares threat intelligence across its network, so an attacking address blocked on one server is blocked across every server in the network. - Hosted.com’s broader stack already includes FortiGate firewalls, distributed denial-of-service protection, CageFS account isolation, SpamExperts email filtering, Acronis backups, WordPress staging, free SSL certificates and a 99.9% uptime commitment. - Hosted.com says the security features are published at the company’s website.

Between the lines: - The timing reflects how zero-day exposure has become a baseline risk, not an edge case. - Google Threat Intelligence Group tracked 90 zero-day vulnerabilities exploited in the wild during 2025, up from 78 in 2024, in a report published in March 2026. - Hosted.com argues the bigger problem for small sites is not just discovery of a flaw, but the delay between a patch’s release and actual installation. - The company’s approach favors automated containment because AI-assisted attack tooling has increased the speed and scale of probing, not created an entirely new category of threat. - The strategy also shifts routine security work off business owners who are already handling updates, monitoring and uptime.

What's next: - Hosted.com says the goal is to shorten the time between compromise and containment when prevention fails. - The company will continue relying on layered controls, backups and staging to reduce the damage from future attacks. - Wayne Diamond, founder and CEO of Hosted.com, said most small businesses will never hire a security engineer, so the host has to make that unnecessary.

The bottom line: - Hosted.com is betting that paired behavioral and signature-based protection, built into hosting, is better for small websites than security tools left for customers to configure on their own.