ModSecurity is a web server software module designed for Apache that is commonly bundled with cPanel. Its primary purpose is to provide an additional layer of protection against malicious attacks, particularly brute force attacks and is enabled by default for all new accounts.

It is generally recommended to keep ModSecurity enabled (that’s why it’s enabled by default), although there may be situations where it may need to be temporarily disabled in order to resolve an issue, such as a WordPress admin lockdown caused by brute force attacks.

Below is a quick guideline on how to enable/disable ModSecurity in Cpanel.

1. Navigate to your cPanel login page and enter your login credentials to log in.
2. Once you are logged in, locate the “Security” section, you want to click on the “ModSecurity” icon.
3. In a case where you want ModSecurity enabled/disabled across all domains under the cPanel, toggle the enable/disable button.
4. If you want to enable/disable ModSecurity for a specific domain, navigate to the domain in the list then click on the “On/Off” button to enable/disable ModSecurity.

Meanwhile, keep in mind that ModSecurity provides an additional layer of security for your website, and it is generally recommended to keep it enabled. However, in certain situations, such as when troubleshooting issues related to ModSecurity, you may need to enable or disable it for specific domains.