Home/Features
The whole stack, one panel

See exactly what your team will
work in — every day

Not a wall of checkboxes. Below is a walk through the real HostPane interface, one capability at a time — the dashboards, editors and consoles your operators, resellers and customers actually use.

Administrator · Overview

Watch the whole server at a glance

The operator's control room: live CPU, memory, disk and network, a subsystem-health grid, and alerts that fire the moment a threshold is crossed — with a watchdog that can bring a stuck service back on its own.

  • ✓
    Real-time graphs for every resource, updated live
  • ✓
    Subsystem health grid — web, mail, DNS, database, FTP
  • ✓
    Alert rules + self-healing watchdog that auto-repairs failed units
Explore monitoring →
hostpane · overview
CPU
38%
Memory
61%
Disk
44%
Server load · last 24h
 Web · NGINXrunning
 Mail · Exim + Dovecotrunning
 DNS · PowerDNSrunning
 Database · MariaDBrestarting
Administrator · Accounts

Every hosting account, in one list

Create, suspend, modify or terminate accounts in a click. Real disk and bandwidth usage sit right on the row, packages fill the quotas, and "log in to account" drops you into the customer view to help.

  • ✓
    Full lifecycle — create, suspend, modify, terminate
  • ✓
    Live usage bars for disk & bandwidth, refreshed for you
  • ✓
    Packages & quotas plus one-click impersonation
Explore account tools →
hostpane · accounts
acme-store
acme-store.example
7.2 / 10 GB
active
bluewave
bluewave.example
4.1 / 10 GB
active
northwind
northwind.example
9.3 / 10 GB
near limit
ridgeline
ridgeline.example
2.4 / 10 GB
suspended
+ Create accountLog in to account
Customer · Websites

Add a domain — HTTPS turns itself on

Point DNS at the box and HostPane issues a real certificate automatically, no button to press. Pick a PHP version per site, add subdomains, aliases and redirects, and switch on the web application firewall. Sites run on NGINX — or on Apache, when your customers' applications expect .htaccess.

  • ✓
    Automatic HTTPS the moment DNS resolves
  • ✓
    NGINX or Apache, switched server-wide with every site moved and tested first
  • ✓
    WAF on either server, plus redirects, hotlink & directory protection
Explore website tools →
hostpane · websites
acme-store.example
🔒 HTTPS · Let's Encrypt · 89 days
PHP 8.3
shop.acme-store.example
🔒 HTTPS · auto-renew on
PHP 8.2
blog.acme-store.example
issuing certificate…
pending
WAF: onRedirectsHotlinkIndexes
# vhost generated for you
server { listen 127.0.0.1:8081;
  root /home/acme-store/public_html;
  modsecurity on; fastcgi_pass php8.3; }
Customer · Email

A real mail server that lands in the inbox

Mailboxes, forwarders, autoresponders and Sieve filters, with the deliverability work done for you: DKIM, SPF and DMARC in place, and your choice of spam engine — SpamAssassin or Rspamd, with a live dashboard. Spam settings go down to the single mailbox, and a domain whose mail lives elsewhere can say so.

  • ✓
    DKIM · SPF · DMARC configured automatically
  • ✓
    Per-mailbox spam: thresholds, a Spam folder, optional auto-delete
  • ✓
    BoxTrapper, email routing & country filtering, plus webmail, encryption and virus scanning
Explore email tools →
hostpane · rspamd
SpamAssassinRspamd ✓
1,284 scanned
● No action850
● Greylist20
● Add header100
● Reject25
Bayes learned
Customer · DNS

Authoritative DNS you actually control

Every new domain gets its zone created for you. Edit records in a clean table, run on BIND or PowerDNS — the operator's choice — and turn on DNSSEC to sign the zone and hand you the DS records to publish. Give an account a dedicated IPv6 address and its AAAA records follow.

  • ✓
    BIND or PowerDNS, selectable per server
  • ✓
    DNSSEC signing on either engine, with copy-ready DS records
  • ✓
    Automatic zones + a full record editor
Explore DNS tools →
hostpane · dns · acme-store.example
PowerDNSBIND
🔒 DNSSEC signed
A @203.0.113.20
A www203.0.113.20
MX @10 mail.acme-store.example
TXT vpw._domainkey v=DKIM1; k=rsa; p=MIIB…
TXT @v=spf1 a mx ~all
+ Add record
Customer · Databases & apps

Databases and one-click apps, self-service

MariaDB and PostgreSQL run side by side. Customers create databases and users themselves — or with a three-step wizard — reach them from a familiar web admin, and install WordPress, Joomla, MediaWiki, phpBB or Nextcloud onto an empty site in one click.

  • ✓
    MariaDB & PostgreSQL with a web admin
  • ✓
    Remote database access, controlled per account
  • ✓
    Five one-click apps, each download checked against a pinned checksum
Explore database tools →
hostpane · install app
DB acme_shopMariaDB · 128 MB
DB acme_analyticsPostgreSQL · 44 MB
WInstalling WordPress → blog.acme-store.example
✓ Download coredone
✓ Provision database + userdone
▸ Configure & installrunning
Operator & customer · Backups

Backups you can actually restore

Scheduled, deduplicated, encrypted backups to local and remote storage. Every run is tracked, and restoring any point in time is a click — with a dashboard that shows you it's working before you need it.

  • ✓
    Local + remote destinations, encrypted at rest
  • ✓
    Point-in-time restore from any snapshot
  • ✓
    Run history & status dashboards
Explore backup tools →
hostpane · backups
Last run
2h ago
Snapshots
168
Success
100%
LAST 14 DAYS
📁 Local☁ Remote (restic)Restore…
Administrator · Terminal & security

Root power, with the guardrails on

Run commands in an in-browser terminal, audited before they execute. Under it all, the panel itself never runs as root — a separate helper does the privileged work and validates every request.

  • ✓
    In-browser terminal, every command audited
  • ✓
    Two-process model — the web app is unprivileged
  • ✓
    Brute-force firewall, 2FA & a full audit log
Explore security tools →
hostpane · terminal (runs as root, audited)
Administrator · Convert a live server

Switch from cPanel without reinstalling

HostPane adopts a server that is already hosting customers — cPanel, DirectAdmin, CWP or Plesk — in place. It reads the running panel, stages everything beside it, and rehearses the whole switch before you book a window. No customer data moves; sites and mail stay where they are.

  • ✓
    Prepare changes nothing — the old panel keeps serving all the way through
  • ✓
    A dry run that can refuse — blockers stop the cutover, with the fix spelled out
  • ✓
    Automatic rollback if verification fails — nobody has to be watching
See how the switch works →
hostpane · convert · dry run
CentOS Web Panel 0.9.8 detectedreadable
Accounts
7
Domains
12
Mailboxes
7
✓ Preserved configs · 6ok
✓ Ports 25 · 53 · 80 · 143ok
! shop.example TTL 4hwarn
✓ Zones staged · 12 · 180 recordsok
21 checks passed · 0 blockers
Cutover authorised — expires in 1 hour
Administrator · PHP versions

Add a PHP version with a button

Offer 7.4 through 8.5 side by side and let every site pick its own. Adding a runtime used to mean an SSH session and the right package name for the distribution; now it is one click, and the panel tells you how many sites are on each version before you retire one.

  • ✓
    PHP 7.4 – 8.5, a version and INI settings per domain
  • ✓
    One pool per account, running as that customer's own user
  • ✓
    Verified after installing — a version whose service won't start is reported, not hidden
Explore the PHP tools →
hostpane · php versions
PHP 8.3 · 14 sitesrunning
PHP 8.2 · 6 sitesrunning
PHP 8.1 · 2 sitesrunning
PHP 8.5 · not installedInstall
PHP 7.4 · not installedInstall
# installed, then checked — not just reported
✓ php8.5-fpm present · active · pool socket bound
Customer · Application Manager

Node.js and Python apps, not just PHP

Point the panel at an app folder and a startup file, pick a URL path, and HostPane runs it as a service under the customer's own user, proxies the path to it and restarts it if it falls over. Dependencies install from the same page — npm install or a virtualenv with pip.

  • ✓
    One systemd unit per app, running as the account, never as root
  • ✓
    Secrets kept out of the unit file and out of the process list
  • ✓
    Off by default per plan — you decide which plans get always-on processes
Explore website tools →
hostpane · application manager
storefront-api
Node.js · acme-store.example/api · server.js
running
reports
Python · acme-store.example/reports · app.py
running
webhooks
Node.js · hooks.acme-store.example · index.js
stopped
RestartInstall dependenciesLogsEnvironment
# the unit HostPane writes for you
User=acme-store  NoNewPrivileges=yes
Environment=PORT=30412 HOST=127.0.0.1
EnvironmentFile=/etc/hostpane/apps/… # root-only
Administrator & customer · Fair share

One noisy account can't take the server down

Give a plan a CPU percentage, a memory ceiling and a process limit, and every account on it runs inside its own systemd slice — its PHP, its SSH sessions, its cron jobs and its apps. No kernel add-on to buy. Customers see their own usage against those limits, and each of their websites gets a security grade with the fix for every finding.

  • ✓
    CPU, memory & process limits per plan, applied to every account on it
  • ✓
    Unlimited stays unlimited — an account only gets a cage when you give its plan one
  • ✓
    Site security grade A–F: exposed .git and .env files, PHP in uploads, outdated WordPress and PHP
Explore security tools →
hostpane · resource usage · acme-store
CPU
31%
of 100% cap
Memory
612 MB
of 1 GB
Processes
23
of 100
SITE SECURITY
acme-store.exampleGrade A
blog.acme-store.example · .env is downloadableGrade D
shop.acme-store.example · 2 plugin updatesGrade B
Administrator · Automation

Let an AI agent help — after a dry run

HostPane speaks the Model Context Protocol, so an AI agent can create accounts, add domains and mailboxes, or read the server forecast. Every tool that changes something accepts dry_run: the agent sees the checks, the steps in order and exactly what would be sent, and nothing changes until it asks for real. The same operations are in the REST API and the WHMCS module.

  • ✓
    Off until you switch it on, bearer tokens only, every call audited before it runs
  • ✓
    A closed list of tools — terminals, restores and cutovers are deliberately not offered
  • ✓
    WHMCS module: create, suspend, change plan, single sign-on and usage sync
Explore automation →
mcp · add_domain · dry_run
→ tools/call add_domain
  { "account_id": "acme-store",
    "domain": "shop.example", "dry_run": true }
← plan
  ✓ account exists · account is active
  ✓ not the panel hostname
  ✓ domain is new to this account
  would: write vhost, test, reload (reverting on failure)
  would: regenerate Caddyfile · create the DNS zone
  host verifies: no other account hosts the domain
audit: agent.dry_run · nothing changed
Administrator · Fleet & forecasting

Every server on one page — and what's coming

The Fleet view puts each HostPane server you run in one table, refreshed every minute, using read-only tokens that cannot change anything on the server they watch. On each server, "Looking ahead" reads the metrics history and tells you which disk is filling and how many days are left, before a threshold alert ever fires.

  • ✓
    Read-only fleet tokens — the watcher holds no control over the watched
  • ✓
    Forecasts that must earn their confidence: disk, memory, load and mail queue
  • ✓
    The changes around when it started, listed beside each finding
Explore monitoring →
hostpane · fleet
web1.example.net
this server · 214 accounts · CPU 22%
healthy
web2.example.net
188 accounts · CPU 41%
healthy
mail1.example.net
disk full in ~9 days
warning
web3.example.net
no answer for 3 min
unreachable
Looking ahead · /var on mail1
Administrator · Database server

Run the database server, not just databases

See and end long-running connections on MariaDB and PostgreSQL, tune the server through one validated settings file, and upgrade the engine with a full backup taken first and every step reported. The map tool adopts databases that were created outside the panel, and customer MariaDB databases can live on a separate database server.

  • ✓
    Settings checked by the server binary itself before anything restarts
  • ✓
    MariaDB and PostgreSQL upgrades that keep a way back and roll back on a failed check
  • ✓
    Remote connections switch so customers' Remote MySQL hosts can actually connect
Explore database tools →
hostpane · database server
ConnectionsConfigurationUpgradeMap toolRemote server
acme_shop · SELECT … ORDER BY94 sEnd
blog_wp · UPDATE wp_options0.2 s
analytics · idle in transaction12 s
# MariaDB 10.11 → 11.4
✓ full dump taken · 2.1 GB
✓ packages upgraded · settings file kept
✓ server answering · system tables upgraded
Security is the architecture

Two processes. One trust boundary. Zero shortcuts.

The panel you log into never runs as root. It hands privileged work to a separate root helper over a local socket that only accepts a fixed set of validated commands — so a slip in the web layer can't reach into the system.

  • ✓
    Validated twiceChecked at the web layer and re-checked at the privileged boundary — the helper never trusts the caller.
  • ✓
    Atomic or rolled backConfig changes stage, validate and swap — a bad change reverts to the last-known-good automatically.
  • ✓
    Everything auditedEvery state-changing action is written to an append-only audit log you can search.
  • ✓
    Tenant isolationCustomers are separated at the operating-system level — one account can never read another's files.
Web panel runs as an unprivileged user sessions HTMX UI Root helper executes only validated commands validate rollback local socket · JSON MANAGED SUBSYSTEMS Web Mail DNS DB FTP AUDIT LOG
Every feature, filtered your way

The full toolkit — search by area

Everything in the box, wired together and monitored. Filter to the category you care about.

Up and running fast

Three steps. Live in minutes.

Install the bundle on a supported Linux server, sign in as root, and let the panel install and configure the hosting stack step by step.

1

Install the bundle

Unpack the release and run its installer. It needs no compiler and no internet access, sets up the unprivileged web service and the root helper, and starts nothing public.

2

Sign in and install the stack

Sign in as root with the server's own password, then let Install server add the web, mail and DNS stack — each step checked, resumable if interrupted. Set the hostname and nameservers in Basic setup.

3

Add your first account

Create a package, add a hosting account and a domain — DNS zone, vhost and automatic HTTPS are all provisioned for you.

Who it's for

Built for the people who run hosting

Hosting providers

Run a whole hosting business from one server — accounts, mail, DNS and backups — without stitching tools together or paying per feature.

Agencies & resellers

White-label the panel, hand clients delegated accounts with hard limits, and keep your branding on every screen they see.

In-house IT teams

Give developers self-service websites, databases and mail on infrastructure you own — with the audit trail and isolation you need.

See it on your own server

Start a free trial or book a 30-minute guided demo and we'll walk you through all three panels live.

Start free trial Book a live demo