In a complaint filed Wednesday, the FTC alleged that since 2018, GoDaddy has failed to implement reasonable and appropriate security measures to protect and monitor its website-hosting environments for security threats and misled customers about the extent of its data security protections on its website hosting services.

Web hosting company GoDaddy Inc. will adopt new information security measures to settle allegations from the Federal Trade Commission that it failed to secure customers and visitors from security breaches,

Consequentially, GoDaddy has agreed to a settlement in which it is prohibited from making false or misleading security claims. It must also implement an information security program, conduct regular third-party compliance assessments and report security incidents to the FTC promptly.

The Federal Trade Commission (FTC) will require web hosting giant GoDaddy to implement basic security protections, including HTTPS APIs and mandatory multi-factor authentication, to settle charges that it failed to secure its hosting services against attacks since 2018.

The FTC said GoDaddy would need to implement a robust information security program to settle charges that the company failed to secure its website-hosting services.

The Federal Trade Commission will require web hosting company GoDaddy to implement a robust information security program to settle charges

GoDaddy fails to adequately protect hosted customer websites and engages in misleading privacy advertising, FTC says. It demands robust IT security.

GoDaddy will implement new information-security programs to settle charges that the technology platform failed to secure its website-hosting services and protect its customers from attacks, the Federal Trade Commission said.

Despite its size and complexity, FTC complained that the company had failed multiple security standards that needed to be fixed immediately.

Watchdog alleged it had no SIEM or MFA, orders rapid adoption of basic infosec tools GoDaddy has failed to protect its web-hosting platform with even basic infosec tools and practices since 2018, according to the FTC,