Security
The panel never runs as root. A separate agent checks every request again, and every account runs in its own sandbox.
- Unprivileged web panel; root agent with an allowlist of actions
- Per-account systemd sandbox, hidden processes, disk quotas
- Web application firewall (ModSecurity + OWASP CRS)
- Malware scanner with root-only quarantine
- 2FA with recovery codes, enforced per role; IP allowlist
- Tamper-evident audit log, shipped to remote syslog
- Secrets encrypted at rest
All you need to host and sell
Websites & PHP
Every site in its own sandbox, with the PHP version and settings it needs and a page cache that serves thousands of visitors per second.
WordPress Toolkit
Install, secure, update and copy WordPress in a click — with scheduled tasks run by the server, on time, and never on your visitors' requests.
A complete mail server that stays off blocklists: authenticated sending, limits per account, spam filtering and webmail with single sign-on.
DNS
Authoritative DNS with DNSSEC and a multi-server cluster, with mail records set up for you.
Databases
MariaDB, PostgreSQL, MongoDB and Redis for every account, each isolated, each backed up.
Backups & disaster recovery
Full and incremental backups, encrypted before they leave the server, verified, and restorable to a new server with one command.