We have introduced Monarx on all our Linux hosting servers, including individual hosting, WordPress, reseller and cloud/VPS services. The platform uses artificial intelligence to detect malware, automate its removal and block malicious activity in real time through ThreatShield.
According to Monarx, Duplika was the first Argentina-based hosting provider to adopt its platform. We did so to expand protection for the sites you host with us and reduce the work needed to respond to an infection.
Protection is included in the service, at no extra cost and without requiring you to install a plugin. Our team manages the integration as part of the infrastructure.
What Monarx protects
Malware can modify website files, insert unwanted links or redirects, and leave hidden access points for future intrusions. For a business, an infection can interrupt sales, damage visitors’ trust and take time to recover from.
Monarx works with files and application activity on Linux servers. Its behaviour-based detection analyses what code does to recognise threats, even when it is obfuscated to make identification difficult. This extends detection beyond tools that rely solely on signatures of known malware.
We have used Imunify360 to protect our servers for years. Monarx works alongside Imunify360 and adds another layer of analysis: during implementation, we found threats that our existing security solution had not identified, including infections that had gone unnoticed for years.
How it works on our servers
An agent installed on the server communicates with Monarx’s cloud analysis platform. This combination identifies threats and automates their treatment:
- File inspection. The system analyses website files, including those uploaded through FTP, SFTP or the file manager.
- Threat classification. Monarx uses behavioural analysis and shared intelligence to recognise malicious code.
- Cleanup and quarantine. The automated response quarantines malicious files and removes harmful code from compromised files, reducing the time between detection and treatment.
ThreatShield: blocking attacks while applications run
We have also added Monarx ThreatShield. File detection finds malware that is already present; ThreatShield adds protection during application execution to stop malicious activity before it causes an infection.
Its integration with the PHP engine lets it observe application behaviour and context and block malicious actions in real time. This helps stop exploitation attempts and prevent new infections, complementing Monarx’s file cleanup.
Results across our infrastructure
Measurements collected after introducing Monarx show the contribution of this new security layer:
- 89,819 malicious or compromised files detected over 47 days. These included threats our existing protection had missed.
- More than 662,000 attack requests blocked by ThreatShield over 30 days. These were attempts intercepted by real-time protection.
- No malware false positives reported between implementation and the collection of these results. We also received no customer tickets reporting blocks caused by the new protection during that period.
A false positive occurs when a legitimate file is classified as malware. Avoiding these errors matters because protection should not interrupt normal website operation or create unnecessary support requests. This was one of the improvements we valued most when introducing Monarx.
What it brings to your project
- Fewer security tasks for you. Protection is managed at infrastructure level, without requiring you to configure a scanner for every site.
- Automatic response to detected malware. Helps reduce the time an infection can remain active.
- Prevention of new infections. ThreatShield blocks malicious activity while applications run.
- Protection for different applications. Working at server level extends its scope beyond any single WordPress installation.
- A team to investigate incidents. If you notice an unusual redirect, modified files or a security alert, Duplika support can investigate with you.
For people managing several websites or reseller accounts, this provides a shared foundation of protection without installing tools separately for each project. Detection, automated response and real-time protection are part of the service, with no additional Monarx charge.
How it complements Cloudflare
Each service covers a different part of the infrastructure. Cloudflare DNS Firewall protects domain resolution for domains using our DNS servers. Magic Transit mitigates network DDoS attacks against our servers in the United States and Europe. Monarx addresses malware on Linux hosting servers.
These layers complement each site’s maintenance. Keeping WordPress, plugins and themes updated, protecting passwords and maintaining backups remain necessary: malware detection and cleanup help respond to an infection, but the route used to gain access must also be addressed.
What you need to do
If your site is already hosted on our Linux hosting services, protection is included. If you are looking for a home for your project, explore our web hosting and WordPress plans.
If you need help with an alert or want to check coverage for your server, contact us. We will review the situation with you.