# Web Shield, statistics and logs on Windows hosting

> See what protects your HyperDC Windows hosting: what Web Shield refuses by default, your site's statistics, its access log and the list of recent activity.

Difficulty: Beginner

Your Windows hosting comes with **Web Shield**, and your service page shows what happens on your sites.

## What Web Shield does

Web Shield checks the address, query string and headers of incoming requests. At its default level it refuses, before they reach your site:

- SQL injection attempts in the address;
- attempts to climb out of your folders (path traversal);
- requests for files that must stay private, such as `web.config`, `.env` and anything under `.git`.

Normal pages keep working. You can still upload and edit these files in [File Manager](/guides/windows-hosting-files-ftp); only visitors are refused.

**Verify:** open `https://example.com/web.config` in a browser. You get an error page, not the file.

> **Note**
>
> Web Shield does not read form data or uploads, and it does not replace updates. Keep your applications up to date.

## See your traffic

Open **Statistics** on your service page to see your site's traffic by day.

## Read the access log

1. Open **Logs** and choose the **Website**.
2. Select **Access** and how many lines you want.
3. Select **Refresh** to see the latest requests.

The newest lines are at the bottom. This is the place to check whether a request reached your site and what status it got.

## See what changed

**Activity** lists what was done on your hosting account, when and by whom. It helps when something changed and you do not know why.

## Next steps

- Errors from an ASP.NET site: [ASP.NET and IIS errors](/guides/aspnet-iis-errors).
- A site that was broken into: [clean a hacked website](/guides/clean-hacked-website).

## Frequently asked questions

### Do I have to turn Web Shield on?

No. It protects your sites at its default level, and normal pages keep working.

### Does Web Shield replace updates?

No. It checks the address, query string and headers of a request, not form data or uploads. Keep your applications up to date as well.

### A normal page of mine is refused. What now?

Send us the time and the address of the request in a ticket, and we look at it with you.

### Can I see the Windows event log?

Not on shared Windows hosting; we manage the server. For a failing request, the Logs tab shows the access log, and a ticket with the time and address gets you more.

---

Source: <https://hyperdc.com/guides/products/windows-hosting-security-logs>\
Updated: 2026-11-02