@AlwaysSkint I have started working on modsecurity for Hestia recently but unfortunately it will take some time before it’s released, it might not even end up there if I find any showstoppers.
Can you share the extra rulesets you mentioned on the other thead besides the default owasp ones?