capability index
Everything the panel
actually does.
No feature grid of vague promises. Every capability below maps to a real component in the stack — with the technical detail a sysadmin evaluates on.
performance
Blazing-fast by default
HTTP/3, real Early Hints, and intelligent caching deliver lightning-fast loads — the difference between a visitor staying and leaving.
- HTTP/3 + QUIC transport
- Real Early Hints (HTTP 103) preload
- Dynamic cache with smart invalidation
- WebP conversion on-the-fly
security
Isolation that actually isolates
Security in every layer. True user isolation and dedicated PHP-FPM pools mean one compromised site never touches its neighbors.
- 0700 directories / 0600 files, no shared access
- SELinux enforcing — mandatory-access-control confinement
- Dedicated PHP-FPM pool per system user
- Native integrated Web Application Firewall (pxShield)
| alice | php-fpm:alice | 0700 | 🔒 |
| bravo | php-fpm:bravo | 0700 | 🔒 |
| carol | php-fpm:carol | 0700 | 🔒 |
wordpress
Tuned for WordPress, out of the box
Dynamic caching, automatic purge on content changes, and Opcache preloading — the technical details handled so you can focus on content.
- Dynamic cache with smart invalidation
- Page cache with auto-purge on update
- WP-CLI integration & automation
- Opcache preloading for peak PHP
protection
Multi-layered active defense
Beyond the basics: behavioral DDoS mitigation, brute-force blocking, injection filtering, and bot detection — kept current automatically.
- pxShield DDoS (behavioral analysis)
- Fail2ban with WordPress rules
- SQLi / XSS filtering via native pxShield WAF
- Bot detection with challenge pages
modern stack
Modern components, no legacy baggage
Carefully chosen, actively maintained software — the opposite of a crusty Apache/cPanel box. Faster, leaner, production-tested.
- CoreHttpd — auto HTTPS, HTTP/3; on-the-fly WebP + Early Hints (free); JS/CSS minify (Pro)
- PHP 7.4 – 8.4, concurrent FPM pools
- MariaDB 10.11 LTS (unified)
- PowerDNS — GeoDNS, DNSSEC, API
backups
Encrypted backups, restorable in one click
Automated, AES-256 encrypted, incremental backups to the storage you already use — and a one-click restore when it matters.
- S3 · GCS · Azure · MinIO · SFTP targets
- AES-256 encryption at rest & in transit
- Incremental — 70–90% smaller
- One-click restore to any server
See what's included in each edition
Personal ships the full core stack, free. Pro and Business add the premium layers.